{
"type": "URL",
"indicator": "https://u003dthis.g.next",
"general": {
"sections": [
"general",
"url_list",
"http_scans",
"screenshot"
],
"indicator": "https://u003dthis.g.next",
"type": "url",
"type_title": "URL",
"validation": [],
"base_indicator": {
"id": 3324596488,
"indicator": "https://u003dthis.g.next",
"type": "URL",
"title": "",
"description": "",
"content": "",
"access_type": "public",
"access_reason": ""
},
"pulse_info": {
"count": 45,
"pulses": [
{
"id": "6963596c4cd594b77b4675ec",
"name": "Project Cicada-.Christopher \u201cBuzz\u201d Ahmann - PalantirFoundry | The State of Colorado | ",
"description": "",
"modified": "2026-02-10T06:05:39.764000",
"created": "2026-01-11T08:03:56.534000",
"tags": [
"colorado state",
"freeman mathis",
"history",
"cyber risk",
"aspen insureds",
"gaig insureds",
"landy insureds",
"nip group",
"purm insureds",
"overview core",
"united",
"ip address",
"present nov",
"present may",
"moved",
"encrypt",
"unknown",
"backdoor",
"passive dns",
"ransom",
"checkin",
"trojandropper",
"mtb nov",
"twitter",
"trojan",
"data upload",
"extraction",
"failed",
"united states",
"server response",
"google safe",
"results may",
"lowfi",
"virtool",
"mtb alf",
"mh alf",
"port",
"windows nt",
"destination",
"msie",
"khtml",
"gecko",
"unknown aaaa",
"a domains",
"meta",
"for privacy",
"cop supply",
"urls",
"as139646 hong",
"hostname",
"files",
"hong kong",
"domain add",
"ip related",
"hash avast",
"avg clamav",
"msdefender may",
"ddos",
"as13335",
"ipv4",
"certificate",
"hostname add",
"url analysis",
"files ip",
"name strings",
"category",
"united states",
"pulse indicator",
"address",
"error",
"null",
"object",
"string",
"number",
"google maps",
"promise",
"javascript api",
"dataset",
"bigint",
"dark",
"android",
"infinity",
"internal",
"roboto",
"trident",
"void",
"small",
"lightrail",
"false",
"span",
"close",
"light",
"hybrid",
"embed",
"iframe",
"keygen",
"this",
"february",
"bounce",
"drop",
"inside",
"outside",
"marker",
"present dec",
"pulses otx",
"aaaa",
"asnone country",
"record value",
"title",
"pulse pulses",
"pulses",
"showing",
"unknown cname",
"unknown soa",
"next associated",
"ipv4 add",
"cycbot",
"extract indic",
"sneaker bots",
"proxies data",
"script script",
"adult content",
"nextimage",
"porn site",
"div div",
"platform make",
"cloudfront x",
"hio52 p3",
"unknown ns",
"pulse submit",
"title error",
"reverse dns",
"status",
"servers",
"name servers",
"vashti hostname",
"scan endpoints",
"url http",
"http",
"files domain",
"files related",
"pulses none",
"dnssec",
"sec ch",
"ch ua",
"ua full",
"ua platform",
"ua bitness",
"ua arch",
"version sec",
"mobile sec",
"model sec",
"version list",
"domain",
"emails",
"cookie",
"url https",
"show",
"filehash",
"urls show",
"date checked",
"url hostname",
"results nov",
"win32",
"type",
"learn",
"ck id",
"name tactics",
"suspicious",
"informative",
"command",
"adversaries",
"ssl certificate",
"defense evasion",
"spawns",
"flag",
"llc name",
"server",
"markmonitor",
"name server",
"windir",
"openurl c",
"prefetch2",
"show technique",
"mitre att",
"ck matrix",
"pattern match",
"ascii text",
"sha1",
"href",
"show process",
"file",
"general",
"local",
"path",
"germany unknown",
"date",
"registrar",
"ip whois",
"dynamicloader",
"high",
"medium",
"search",
"displayname",
"tofsee",
"win64",
"write",
"stream",
"malware",
"push",
"entries",
"tls handshake",
"failure",
"forbidden",
"tlsv1",
"april",
"next",
"write c",
"intel",
"ms windows",
"sha1 add",
"av detections",
"ids detections",
"yara detections",
"alerts",
"analysis date",
"file score",
"sha256 add",
"present jun",
"present mar",
"medelln",
"colombia asn",
"dns resolutions",
"address domain",
"related tags",
"none google",
"safe browsing",
"external",
"present sep",
"present aug",
"as54113",
"present jul",
"as8068",
"gmt content",
"total",
"read",
"delete",
"top source",
"quasi",
"murderers",
"christopher ahmann",
"buzz ahmann",
"wow64",
"slcc2",
"media center",
"labor",
"employment",
"cdle",
"dowc",
"colorado",
"workers",
"coloradoif",
"independent",
"state",
"company",
"entity type",
"authorized line",
"analysis",
"tor analysis",
"process details",
"network traffic",
"t1071",
"potential ip",
"click",
"found",
"t1480 execution",
"bad traffic",
"et info",
"ck techniques",
"evasion att",
"t1057",
"refresh",
"body",
"strings",
"tools",
"look",
"verify",
"restart",
"cname",
"form",
"pulse",
"script domains",
"script urls",
"administrator",
"services llc",
"dns admin",
"domain admin",
"global llc",
"domain manager",
"computer system",
"ltd domain",
"network",
"alibaba",
"facebook",
"phishme",
"sogou",
"present jan",
"present feb",
"present oct"
],
"references": [
"https://www.fmglaw.com/lawyers/christopher-ahmann - found in adult content pulse.",
"Sneaker Bots Proxies Servers Cook Groups Cop Supply",
"archive.cop.supply \u2022 dev.cop.supply \u2022 https://cop.supply/ \u2022 https://cop.supply/bot-lists/",
"https://cop.supply/supreme-bots/\u2022 https://cop.supply/useful-tools/",
"https://cop.supply/proxies-lists/ \u2022 https://cop.supply/shopify-bots/",
"dns.army \u2022 www.dcopr.dns.army \u2022 www.glsyaiwjj.dns.army \u2022 www.wgmvk.dns.army",
"https://maps.googleapis.com/maps/api/js?sensor=false",
"cell-0.af-south-1.prod.telemetry.console.api.aws",
"howtoworkacrickoutofyourneck2.pages.dev",
"firebase-auth-eich0v.pages.dev",
"http://ianswertomom.com/develop-wise-woman-within-yourself",
"http://ianswertomom.com/bible-verses-struggling-contentment-mom/ I",
"https://i-want-to-start-an-onlyfans.pages.dev/favicon.ico| I bet you do boo boo",
"makeapornsite.com \u2022 https://pornhighschool.com/ \u2022 https://ethnicerotic.com \u2022 https://twitter.com/Make",
"https://khmerpornvideo.signup0.y.id/",
"https://lordseriala.life/6337-zvezdnye-vojny-opornaja-komanda.html",
"https://clear.ml/infrastructure-control-plane",
"dev-app.project-cicada.com \u2022 http://dev-app.project-cicada.com \u2022 https://dev-app.project-cicada.com (2014 report predates 2016 reports)",
"https://amano.inboundtools.com/tpcontact URL https://armg.inboundtools.com/ URL https://gaiax.inboundtools.com/internship URL https://hmk.inboundtools.com/ URL https://hmk.inboundtools.com/form/assetview_siryo_sier",
"https://download.clear.ml/cpython_builds/releases/ \u2022 https://download.clear.",
"https://links.mail.samsara.com/s/c/P9R6gGlExR4nfCwqwJXUmr7NmKcMNde4ZBhCFprlVtsFNgh-4tuTWla0aXN9rIWCjrWtn0Vln7x-hexxVBlY3xxvnEevR8qJU5G5xV3__wo-X7kkpSOhJVfejac-Xk8qu6zs5Z-tILwWYRkNScZNGlAqfwQuJuRw5M-n_ZKI6tuY5XGCZAqWoQepi1NnJiW4wZJkzZlOwGtNkusbuKDcMsLVrrhji2eKh4kYgrJp_SeycJRhasLFCQ3c2bPu4sahEWpcHZrQBaxvdfQgTEno8kV-RJdTDO0zK5MyWDJLeds7mnaDrxlb0O2zmhebUdlHE0R0xHi25dympBUpMlLsQV8bx1WUTOfgK4k0ci9o_2Gbfe22-jLxsJN-msV6pxWYQMaxRNFd4iZRC9J9Z1SC5MBqbvNzqdt98kFdpibnv_QIHdhFyHOR_Ip_LX67Dncc8V8OvAi-H5phfeSyDzwdzf2FQIi82",
"https://voidpet.io/invite/scaredscared/1rpzxWXa61 \u2022 https://sex-doggy.net/tag/censored",
"Everyone has simply asked you alll to stop. Target never asked anyone for money.",
"Legal court documented agreement to allow and pay target to hire cyber investigators",
"Attacks are being carried out by The State of Colorado"
],
"public": 1,
"adversary": "",
"targeted_countries": [
"United States of America",
"Japan",
"France",
"Ireland",
"Spain",
"Italy",
"Aruba",
"Australia",
"Denmark",
"United Kingdom of Great Britain and Northern Ireland",
"Germany",
"T\u00fcrkiye",
"Indonesia"
],
"malware_families": [
{
"id": "Win.Trojan.GravityRAT-6511862-0",
"display_name": "Win.Trojan.GravityRAT-6511862-0",
"target": null
},
{
"id": "ALF:HeraklezEval:Trojan:MSIL/Gravityrat!rfn",
"display_name": "ALF:HeraklezEval:Trojan:MSIL/Gravityrat!rfn",
"target": null
},
{
"id": "Unix.Trojan.Tsunami-6981155-0",
"display_name": "Unix.Trojan.Tsunami-6981155-0",
"target": null
},
{
"id": "TrojanDropper:Win32/Systex.A",
"display_name": "TrojanDropper:Win32/Systex.A",
"target": "/malware/TrojanDropper:Win32/Systex.A"
},
{
"id": "Win.Trojan.Tepfer-61",
"display_name": "Win.Trojan.Tepfer-61",
"target": null
},
{
"id": "TrojanDownloader:Win32/CutwailRansom:Win32/Crowti.A",
"display_name": "TrojanDownloader:Win32/CutwailRansom:Win32/Crowti.A",
"target": null
},
{
"id": "VirTool:Win32/VBInject.gen!MH",
"display_name": "VirTool:Win32/VBInject.gen!MH",
"target": "/malware/VirTool:Win32/VBInject.gen!MH"
},
{
"id": "ALF:NID:Susp_NSIS_Stub.A",
"display_name": "ALF:NID:Susp_NSIS_Stub.A",
"target": null
},
{
"id": "#LOWFI:HSTR:Criakl.B1",
"display_name": "#LOWFI:HSTR:Criakl.B1",
"target": null
},
{
"id": "Backdoor:Win32/Arwobot.B",
"display_name": "Backdoor:Win32/Arwobot.B",
"target": "/malware/Backdoor:Win32/Arwobot.B"
},
{
"id": "Win.Packed.Bandook-9882274-1",
"display_name": "Win.Packed.Bandook-9882274-1",
"target": null
},
{
"id": "TrojanDownloader:Win32/Cutwail",
"display_name": "TrojanDownloader:Win32/Cutwail",
"target": "/malware/TrojanDownloader:Win32/Cutwail"
},
{
"id": "Win.Downloader.Small-4507",
"display_name": "Win.Downloader.Small-4507",
"target": null
},
{
"id": "Trojan:Win32/Qbot.R!MTB",
"display_name": "Trojan:Win32/Qbot.R!MTB",
"target": "/malware/Trojan:Win32/Qbot.R!MTB"
},
{
"id": "Win.Malware.Mikey-9949492-0",
"display_name": "Win.Malware.Mikey-9949492-0",
"target": null
},
{
"id": "Ransom:Win32/Crowti.A",
"display_name": "Ransom:Win32/Crowti.A",
"target": "/malware/Ransom:Win32/Crowti.A"
},
{
"id": "Backdoor:Linux/DemonBot.Aa!MTB",
"display_name": "Backdoor:Linux/DemonBot.Aa!MTB",
"target": "/malware/Backdoor:Linux/DemonBot.Aa!MTB"
},
{
"id": "Unix.Trojan.Gafgyt-6981154-0",
"display_name": "Unix.Trojan.Gafgyt-6981154-0",
"target": null
},
{
"id": "DDOS:Linux/Gafgyt.YA!MTB",
"display_name": "DDOS:Linux/Gafgyt.YA!MTB",
"target": "/malware/DDOS:Linux/Gafgyt.YA!MTB"
},
{
"id": "CVE-2017-11882",
"display_name": "CVE-2017-11882",
"target": null
},
{
"id": "ALF:Exploit:O97M/CVE-2017-8977",
"display_name": "ALF:Exploit:O97M/CVE-2017-8977",
"target": null
},
{
"id": "Cycbot",
"display_name": "Cycbot",
"target": null
},
{
"id": "Win32:BotX-gen\\ [Trj]",
"display_name": "Win32:BotX-gen\\ [Trj]",
"target": null
},
{
"id": "NIDS",
"display_name": "NIDS",
"target": null
},
{
"id": "Mirai (ELF)",
"display_name": "Mirai (ELF)",
"target": null
},
{
"id": "Worm",
"display_name": "Worm",
"target": null
}
],
"attack_ids": [
{
"id": "T1027",
"name": "Obfuscated Files or Information",
"display_name": "T1027 - Obfuscated Files or Information"
},
{
"id": "T1055",
"name": "Process Injection",
"display_name": "T1055 - Process Injection"
},
{
"id": "T1057",
"name": "Process Discovery",
"display_name": "T1057 - Process Discovery"
},
{
"id": "T1069",
"name": "Permission Groups Discovery",
"display_name": "T1069 - Permission Groups Discovery"
},
{
"id": "T1071",
"name": "Application Layer Protocol",
"display_name": "T1071 - Application Layer Protocol"
},
{
"id": "T1105",
"name": "Ingress Tool Transfer",
"display_name": "T1105 - Ingress Tool Transfer"
},
{
"id": "T1480",
"name": "Execution Guardrails",
"display_name": "T1480 - Execution Guardrails"
},
{
"id": "T1553",
"name": "Subvert Trust Controls",
"display_name": "T1553 - Subvert Trust Controls"
},
{
"id": "T1568",
"name": "Dynamic Resolution",
"display_name": "T1568 - Dynamic Resolution"
},
{
"id": "T1583",
"name": "Acquire Infrastructure",
"display_name": "T1583 - Acquire Infrastructure"
},
{
"id": "T1590",
"name": "Gather Victim Network Information",
"display_name": "T1590 - Gather Victim Network Information"
},
{
"id": "T1204.001",
"name": "Malicious Link",
"display_name": "T1204.001 - Malicious Link"
},
{
"id": "T1457",
"name": "Malicious Media Content",
"display_name": "T1457 - Malicious Media Content"
},
{
"id": "T1071.004",
"name": "DNS",
"display_name": "T1071.004 - DNS"
},
{
"id": "T1155",
"name": "AppleScript",
"display_name": "T1155 - AppleScript"
},
{
"id": "T1060",
"name": "Registry Run Keys / Startup Folder",
"display_name": "T1060 - Registry Run Keys / Startup Folder"
},
{
"id": "T1045",
"name": "Software Packing",
"display_name": "T1045 - Software Packing"
},
{
"id": "T1063",
"name": "Security Software Discovery",
"display_name": "T1063 - Security Software Discovery"
},
{
"id": "T1113",
"name": "Screen Capture",
"display_name": "T1113 - Screen Capture"
},
{
"id": "T1068",
"name": "Exploitation for Privilege Escalation",
"display_name": "T1068 - Exploitation for Privilege Escalation"
},
{
"id": "T1210",
"name": "Exploitation of Remote Services",
"display_name": "T1210 - Exploitation of Remote Services"
},
{
"id": "T1566",
"name": "Phishing",
"display_name": "T1566 - Phishing"
},
{
"id": "TA0037",
"name": "Command and Control",
"display_name": "TA0037 - Command and Control"
},
{
"id": "T1031",
"name": "Modify Existing Service",
"display_name": "T1031 - Modify Existing Service"
},
{
"id": "T1583.005",
"name": "Botnet",
"display_name": "T1583.005 - Botnet"
},
{
"id": "T1176",
"name": "Browser Extensions",
"display_name": "T1176 - Browser Extensions"
},
{
"id": "T1185",
"name": "Man in the Browser",
"display_name": "T1185 - Man in the Browser"
},
{
"id": "T1574.008",
"name": "Path Interception by Search Order Hijacking",
"display_name": "T1574.008 - Path Interception by Search Order Hijacking"
},
{
"id": "T1410",
"name": "Network Traffic Capture or Redirection",
"display_name": "T1410 - Network Traffic Capture or Redirection"
},
{
"id": "T1449",
"name": "Exploit SS7 to Redirect Phone Calls/SMS",
"display_name": "T1449 - Exploit SS7 to Redirect Phone Calls/SMS"
},
{
"id": "T1593.002",
"name": "Search Engines",
"display_name": "T1593.002 - Search Engines"
}
],
"industries": [
"Insurance",
"Construction"
],
"TLP": "green",
"cloned_from": "693cdc5b8ebc10664439c2fb",
"export_count": 14,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "Q.Vashti",
"id": "337942",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 54118,
"domain": 11153,
"hostname": 18578,
"email": 21,
"FileHash-SHA256": 4905,
"FileHash-MD5": 548,
"FileHash-SHA1": 534,
"CVE": 7,
"SSLCertFingerprint": 20,
"CIDR": 1
},
"indicator_count": 89885,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 140,
"modified_text": "69 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "693cdc5b8ebc10664439c2fb",
"name": "Project Cicada-.Christopher \u201cBuzz\u201d Ahmann - Freeman Mathis & Gary for The State of Colorado",
"description": "State of Colorado attackers use DGA domains set up multiple Law Firms.. Christopher P. \u2019Buzz\u2019 Ahmann Is a legal consultant / attorney./ hacker \nWorks for the State of Colorado/ quasi. Is malicious and doesn\u2019t work alone. Continues to target \nState had relative contacted by a fake entity \u2018Goodness Health\u2019\nLeft vague VM for relative message \u201cWe work on the Medicare side of things.\u201d and? \nSocial engineering call , malicious domain. The State of Colorado has been on a relentless pursuit against target. Fully compromised targets relatives brand new phone. Hacked target since 10/2013.\nMultiple cyber and physical attacks carried out against target and family members.. There are attacks make to look like accidents or malfunctions. This harmful, silencing behavior is somehow illegal for anyone else.",
"modified": "2026-02-10T06:05:39.764000",
"created": "2025-12-13T03:24:11.414000",
"tags": [
"colorado state",
"freeman mathis",
"history",
"cyber risk",
"aspen insureds",
"gaig insureds",
"landy insureds",
"nip group",
"purm insureds",
"overview core",
"united",
"ip address",
"present nov",
"present may",
"moved",
"encrypt",
"unknown",
"backdoor",
"passive dns",
"ransom",
"checkin",
"trojandropper",
"mtb nov",
"twitter",
"trojan",
"data upload",
"extraction",
"failed",
"united states",
"server response",
"google safe",
"results may",
"lowfi",
"virtool",
"mtb alf",
"mh alf",
"port",
"windows nt",
"destination",
"msie",
"khtml",
"gecko",
"unknown aaaa",
"a domains",
"meta",
"for privacy",
"cop supply",
"urls",
"as139646 hong",
"hostname",
"files",
"hong kong",
"domain add",
"ip related",
"hash avast",
"avg clamav",
"msdefender may",
"ddos",
"as13335",
"ipv4",
"certificate",
"hostname add",
"url analysis",
"files ip",
"name strings",
"category",
"united states",
"pulse indicator",
"address",
"error",
"null",
"object",
"string",
"number",
"google maps",
"promise",
"javascript api",
"dataset",
"bigint",
"dark",
"android",
"infinity",
"internal",
"roboto",
"trident",
"void",
"small",
"lightrail",
"false",
"span",
"close",
"light",
"hybrid",
"embed",
"iframe",
"keygen",
"this",
"february",
"bounce",
"drop",
"inside",
"outside",
"marker",
"present dec",
"pulses otx",
"aaaa",
"asnone country",
"record value",
"title",
"pulse pulses",
"pulses",
"showing",
"unknown cname",
"unknown soa",
"next associated",
"ipv4 add",
"cycbot",
"extract indic",
"sneaker bots",
"proxies data",
"script script",
"adult content",
"nextimage",
"porn site",
"div div",
"platform make",
"cloudfront x",
"hio52 p3",
"unknown ns",
"pulse submit",
"title error",
"reverse dns",
"status",
"servers",
"name servers",
"vashti hostname",
"scan endpoints",
"url http",
"http",
"files domain",
"files related",
"pulses none",
"dnssec",
"sec ch",
"ch ua",
"ua full",
"ua platform",
"ua bitness",
"ua arch",
"version sec",
"mobile sec",
"model sec",
"version list",
"domain",
"emails",
"cookie",
"url https",
"show",
"filehash",
"urls show",
"date checked",
"url hostname",
"results nov",
"win32",
"type",
"learn",
"ck id",
"name tactics",
"suspicious",
"informative",
"command",
"adversaries",
"ssl certificate",
"defense evasion",
"spawns",
"flag",
"llc name",
"server",
"markmonitor",
"name server",
"windir",
"openurl c",
"prefetch2",
"show technique",
"mitre att",
"ck matrix",
"pattern match",
"ascii text",
"sha1",
"href",
"show process",
"file",
"general",
"local",
"path",
"germany unknown",
"date",
"registrar",
"ip whois",
"dynamicloader",
"high",
"medium",
"search",
"displayname",
"tofsee",
"win64",
"write",
"stream",
"malware",
"push",
"entries",
"tls handshake",
"failure",
"forbidden",
"tlsv1",
"april",
"next",
"write c",
"intel",
"ms windows",
"sha1 add",
"av detections",
"ids detections",
"yara detections",
"alerts",
"analysis date",
"file score",
"sha256 add",
"present jun",
"present mar",
"medelln",
"colombia asn",
"dns resolutions",
"address domain",
"related tags",
"none google",
"safe browsing",
"external",
"present sep",
"present aug",
"as54113",
"present jul",
"as8068",
"gmt content",
"total",
"read",
"delete",
"top source",
"quasi",
"murderers",
"christopher ahmann",
"buzz ahmann",
"wow64",
"slcc2",
"media center",
"labor",
"employment",
"cdle",
"dowc",
"colorado",
"workers",
"coloradoif",
"independent",
"state",
"company",
"entity type",
"authorized line",
"analysis",
"tor analysis",
"process details",
"network traffic",
"t1071",
"potential ip",
"click",
"found",
"t1480 execution",
"bad traffic",
"et info",
"ck techniques",
"evasion att",
"t1057",
"refresh",
"body",
"strings",
"tools",
"look",
"verify",
"restart",
"cname",
"form",
"pulse",
"script domains",
"script urls",
"administrator",
"services llc",
"dns admin",
"domain admin",
"global llc",
"domain manager",
"computer system",
"ltd domain",
"network",
"alibaba",
"facebook",
"phishme",
"sogou",
"present jan",
"present feb",
"present oct"
],
"references": [
"https://www.fmglaw.com/lawyers/christopher-ahmann - found in adult content pulse.",
"Sneaker Bots Proxies Servers Cook Groups Cop Supply",
"archive.cop.supply \u2022 dev.cop.supply \u2022 https://cop.supply/ \u2022 https://cop.supply/bot-lists/",
"https://cop.supply/supreme-bots/\u2022 https://cop.supply/useful-tools/",
"https://cop.supply/proxies-lists/ \u2022 https://cop.supply/shopify-bots/",
"dns.army \u2022 www.dcopr.dns.army \u2022 www.glsyaiwjj.dns.army \u2022 www.wgmvk.dns.army",
"https://maps.googleapis.com/maps/api/js?sensor=false",
"cell-0.af-south-1.prod.telemetry.console.api.aws",
"howtoworkacrickoutofyourneck2.pages.dev",
"firebase-auth-eich0v.pages.dev",
"http://ianswertomom.com/develop-wise-woman-within-yourself",
"http://ianswertomom.com/bible-verses-struggling-contentment-mom/ I",
"https://i-want-to-start-an-onlyfans.pages.dev/favicon.ico| I bet you do boo boo",
"makeapornsite.com \u2022 https://pornhighschool.com/ \u2022 https://ethnicerotic.com \u2022 https://twitter.com/Make",
"https://khmerpornvideo.signup0.y.id/",
"https://lordseriala.life/6337-zvezdnye-vojny-opornaja-komanda.html",
"https://clear.ml/infrastructure-control-plane",
"dev-app.project-cicada.com \u2022 http://dev-app.project-cicada.com \u2022 https://dev-app.project-cicada.com (2014 report predates 2016 reports)",
"https://amano.inboundtools.com/tpcontact URL https://armg.inboundtools.com/ URL https://gaiax.inboundtools.com/internship URL https://hmk.inboundtools.com/ URL https://hmk.inboundtools.com/form/assetview_siryo_sier",
"https://download.clear.ml/cpython_builds/releases/ \u2022 https://download.clear.",
"https://links.mail.samsara.com/s/c/P9R6gGlExR4nfCwqwJXUmr7NmKcMNde4ZBhCFprlVtsFNgh-4tuTWla0aXN9rIWCjrWtn0Vln7x-hexxVBlY3xxvnEevR8qJU5G5xV3__wo-X7kkpSOhJVfejac-Xk8qu6zs5Z-tILwWYRkNScZNGlAqfwQuJuRw5M-n_ZKI6tuY5XGCZAqWoQepi1NnJiW4wZJkzZlOwGtNkusbuKDcMsLVrrhji2eKh4kYgrJp_SeycJRhasLFCQ3c2bPu4sahEWpcHZrQBaxvdfQgTEno8kV-RJdTDO0zK5MyWDJLeds7mnaDrxlb0O2zmhebUdlHE0R0xHi25dympBUpMlLsQV8bx1WUTOfgK4k0ci9o_2Gbfe22-jLxsJN-msV6pxWYQMaxRNFd4iZRC9J9Z1SC5MBqbvNzqdt98kFdpibnv_QIHdhFyHOR_Ip_LX67Dncc8V8OvAi-H5phfeSyDzwdzf2FQIi82",
"https://voidpet.io/invite/scaredscared/1rpzxWXa61 \u2022 https://sex-doggy.net/tag/censored",
"Everyone has simply asked you alll to stop. Target never asked anyone for money.",
"Legal court documented agreement to allow and pay target to hire cyber investigators",
"Attacks are being carried out by The State of Colorado"
],
"public": 1,
"adversary": "",
"targeted_countries": [
"United States of America",
"Japan",
"France",
"Ireland",
"Spain",
"Italy",
"Aruba",
"Australia",
"Denmark",
"United Kingdom of Great Britain and Northern Ireland",
"Germany",
"T\u00fcrkiye",
"Indonesia"
],
"malware_families": [
{
"id": "Win.Trojan.GravityRAT-6511862-0",
"display_name": "Win.Trojan.GravityRAT-6511862-0",
"target": null
},
{
"id": "ALF:HeraklezEval:Trojan:MSIL/Gravityrat!rfn",
"display_name": "ALF:HeraklezEval:Trojan:MSIL/Gravityrat!rfn",
"target": null
},
{
"id": "Unix.Trojan.Tsunami-6981155-0",
"display_name": "Unix.Trojan.Tsunami-6981155-0",
"target": null
},
{
"id": "TrojanDropper:Win32/Systex.A",
"display_name": "TrojanDropper:Win32/Systex.A",
"target": "/malware/TrojanDropper:Win32/Systex.A"
},
{
"id": "Win.Trojan.Tepfer-61",
"display_name": "Win.Trojan.Tepfer-61",
"target": null
},
{
"id": "TrojanDownloader:Win32/CutwailRansom:Win32/Crowti.A",
"display_name": "TrojanDownloader:Win32/CutwailRansom:Win32/Crowti.A",
"target": null
},
{
"id": "VirTool:Win32/VBInject.gen!MH",
"display_name": "VirTool:Win32/VBInject.gen!MH",
"target": "/malware/VirTool:Win32/VBInject.gen!MH"
},
{
"id": "ALF:NID:Susp_NSIS_Stub.A",
"display_name": "ALF:NID:Susp_NSIS_Stub.A",
"target": null
},
{
"id": "#LOWFI:HSTR:Criakl.B1",
"display_name": "#LOWFI:HSTR:Criakl.B1",
"target": null
},
{
"id": "Backdoor:Win32/Arwobot.B",
"display_name": "Backdoor:Win32/Arwobot.B",
"target": "/malware/Backdoor:Win32/Arwobot.B"
},
{
"id": "Win.Packed.Bandook-9882274-1",
"display_name": "Win.Packed.Bandook-9882274-1",
"target": null
},
{
"id": "TrojanDownloader:Win32/Cutwail",
"display_name": "TrojanDownloader:Win32/Cutwail",
"target": "/malware/TrojanDownloader:Win32/Cutwail"
},
{
"id": "Win.Downloader.Small-4507",
"display_name": "Win.Downloader.Small-4507",
"target": null
},
{
"id": "Trojan:Win32/Qbot.R!MTB",
"display_name": "Trojan:Win32/Qbot.R!MTB",
"target": "/malware/Trojan:Win32/Qbot.R!MTB"
},
{
"id": "Win.Malware.Mikey-9949492-0",
"display_name": "Win.Malware.Mikey-9949492-0",
"target": null
},
{
"id": "Ransom:Win32/Crowti.A",
"display_name": "Ransom:Win32/Crowti.A",
"target": "/malware/Ransom:Win32/Crowti.A"
},
{
"id": "Backdoor:Linux/DemonBot.Aa!MTB",
"display_name": "Backdoor:Linux/DemonBot.Aa!MTB",
"target": "/malware/Backdoor:Linux/DemonBot.Aa!MTB"
},
{
"id": "Unix.Trojan.Gafgyt-6981154-0",
"display_name": "Unix.Trojan.Gafgyt-6981154-0",
"target": null
},
{
"id": "DDOS:Linux/Gafgyt.YA!MTB",
"display_name": "DDOS:Linux/Gafgyt.YA!MTB",
"target": "/malware/DDOS:Linux/Gafgyt.YA!MTB"
},
{
"id": "CVE-2017-11882",
"display_name": "CVE-2017-11882",
"target": null
},
{
"id": "ALF:Exploit:O97M/CVE-2017-8977",
"display_name": "ALF:Exploit:O97M/CVE-2017-8977",
"target": null
},
{
"id": "Cycbot",
"display_name": "Cycbot",
"target": null
},
{
"id": "Win32:BotX-gen\\ [Trj]",
"display_name": "Win32:BotX-gen\\ [Trj]",
"target": null
},
{
"id": "NIDS",
"display_name": "NIDS",
"target": null
},
{
"id": "Mirai (ELF)",
"display_name": "Mirai (ELF)",
"target": null
},
{
"id": "Worm",
"display_name": "Worm",
"target": null
}
],
"attack_ids": [
{
"id": "T1027",
"name": "Obfuscated Files or Information",
"display_name": "T1027 - Obfuscated Files or Information"
},
{
"id": "T1055",
"name": "Process Injection",
"display_name": "T1055 - Process Injection"
},
{
"id": "T1057",
"name": "Process Discovery",
"display_name": "T1057 - Process Discovery"
},
{
"id": "T1069",
"name": "Permission Groups Discovery",
"display_name": "T1069 - Permission Groups Discovery"
},
{
"id": "T1071",
"name": "Application Layer Protocol",
"display_name": "T1071 - Application Layer Protocol"
},
{
"id": "T1105",
"name": "Ingress Tool Transfer",
"display_name": "T1105 - Ingress Tool Transfer"
},
{
"id": "T1480",
"name": "Execution Guardrails",
"display_name": "T1480 - Execution Guardrails"
},
{
"id": "T1553",
"name": "Subvert Trust Controls",
"display_name": "T1553 - Subvert Trust Controls"
},
{
"id": "T1568",
"name": "Dynamic Resolution",
"display_name": "T1568 - Dynamic Resolution"
},
{
"id": "T1583",
"name": "Acquire Infrastructure",
"display_name": "T1583 - Acquire Infrastructure"
},
{
"id": "T1590",
"name": "Gather Victim Network Information",
"display_name": "T1590 - Gather Victim Network Information"
},
{
"id": "T1204.001",
"name": "Malicious Link",
"display_name": "T1204.001 - Malicious Link"
},
{
"id": "T1457",
"name": "Malicious Media Content",
"display_name": "T1457 - Malicious Media Content"
},
{
"id": "T1071.004",
"name": "DNS",
"display_name": "T1071.004 - DNS"
},
{
"id": "T1155",
"name": "AppleScript",
"display_name": "T1155 - AppleScript"
},
{
"id": "T1060",
"name": "Registry Run Keys / Startup Folder",
"display_name": "T1060 - Registry Run Keys / Startup Folder"
},
{
"id": "T1045",
"name": "Software Packing",
"display_name": "T1045 - Software Packing"
},
{
"id": "T1063",
"name": "Security Software Discovery",
"display_name": "T1063 - Security Software Discovery"
},
{
"id": "T1113",
"name": "Screen Capture",
"display_name": "T1113 - Screen Capture"
},
{
"id": "T1068",
"name": "Exploitation for Privilege Escalation",
"display_name": "T1068 - Exploitation for Privilege Escalation"
},
{
"id": "T1210",
"name": "Exploitation of Remote Services",
"display_name": "T1210 - Exploitation of Remote Services"
},
{
"id": "T1566",
"name": "Phishing",
"display_name": "T1566 - Phishing"
},
{
"id": "TA0037",
"name": "Command and Control",
"display_name": "TA0037 - Command and Control"
},
{
"id": "T1031",
"name": "Modify Existing Service",
"display_name": "T1031 - Modify Existing Service"
},
{
"id": "T1583.005",
"name": "Botnet",
"display_name": "T1583.005 - Botnet"
},
{
"id": "T1176",
"name": "Browser Extensions",
"display_name": "T1176 - Browser Extensions"
},
{
"id": "T1185",
"name": "Man in the Browser",
"display_name": "T1185 - Man in the Browser"
},
{
"id": "T1574.008",
"name": "Path Interception by Search Order Hijacking",
"display_name": "T1574.008 - Path Interception by Search Order Hijacking"
},
{
"id": "T1410",
"name": "Network Traffic Capture or Redirection",
"display_name": "T1410 - Network Traffic Capture or Redirection"
},
{
"id": "T1449",
"name": "Exploit SS7 to Redirect Phone Calls/SMS",
"display_name": "T1449 - Exploit SS7 to Redirect Phone Calls/SMS"
},
{
"id": "T1593.002",
"name": "Search Engines",
"display_name": "T1593.002 - Search Engines"
}
],
"industries": [
"Insurance",
"Construction"
],
"TLP": "green",
"cloned_from": null,
"export_count": 8,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "Q.Vashti",
"id": "337942",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 54118,
"domain": 11153,
"hostname": 18578,
"email": 21,
"FileHash-SHA256": 4905,
"FileHash-MD5": 548,
"FileHash-SHA1": 534,
"CVE": 7,
"SSLCertFingerprint": 20,
"CIDR": 1
},
"indicator_count": 89885,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 141,
"modified_text": "69 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "6844240c68255798e08beb3b",
"name": "Bilety online: Tw\u00f3j kolejowy partner w podr\u00f3\u017cy",
"description": "Microsoft has created a new version of its XMLHttpRequest, which allows users to access a website, via a browser or browser without the permission of a third party, using the same address.",
"modified": "2025-07-07T00:01:51.704000",
"created": "2025-06-07T11:35:40.942000",
"tags": [
"sign",
"google sign",
"forgot email",
"criminalip",
"create account",
"bilety online",
"sprzeday biletw",
"polregio",
"ssdeep",
"license",
"typeerror",
"regexp",
"promise",
"function",
"version",
"typeof symbol",
"copyright",
"google llc",
"apache license",
"date",
"without",
"error",
"blank",
"trident",
"generator",
"class",
"mountain view",
"android",
"submission",
"california",
"common name",
"google inc",
"unit android",
"country code",
"us state",
"sha1",
"sha256",
"imphash",
"pehash",
"file type",
"vhash",
"authentihash"
],
"references": [
"http://bilety.polregio.pl",
"https://bilety.polregio.pl",
"http://www.salesmanago.pl/static/sm.js"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [
{
"id": "T1106",
"name": "Native API",
"display_name": "T1106 - Native API"
},
{
"id": "T1059",
"name": "Command and Scripting Interpreter",
"display_name": "T1059 - Command and Scripting Interpreter"
}
],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 16,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "Arek-BTC",
"id": "212764",
"avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 1295,
"hostname": 302,
"domain": 137,
"FileHash-SHA256": 996,
"FileHash-MD5": 38,
"FileHash-SHA1": 40,
"IPv4": 1
},
"indicator_count": 2809,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 122,
"modified_text": "287 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "684c65464466dd19b089f325",
"name": "Zesp\u00f3\u0142 Profilaktyki i Rehabilitacji w Janowicach Wielkich - YouTube",
"description": "If d=void 0===c,w(\"trustedResourceUrl\",d: \"Trusted resourceUrl,\" thend=c.src,d, c.js, then d:",
"modified": "2025-06-13T17:56:28.689000",
"created": "2025-06-13T17:52:06.399000",
"tags": [
"rehabilitacji w",
"youtube tv",
"dami jelenia",
"tv dami",
"jelenia gra",
"zakupy wycz",
"jeli",
"nie korzystasz",
"filmy",
"aby tego",
"copyright",
"closure library",
"argument",
"ifunction",
"error",
"null",
"type",
"cast",
"webchannel",
"su2028u2029",
"chrome",
"xmlhttp",
"kkvoid",
"remotecontrol",
"android",
"unknown",
"screen",
"desktop",
"function",
"string",
"array",
"number",
"vfunction",
"f8192",
"n432",
"true",
"j2048",
"this",
"window",
"void",
"date",
"pokau017c",
"pytfunction",
"fe8function",
"qgzfunction",
"afunction",
"hb28",
"r150",
"promise",
"bigint",
"post",
"edge",
"swhealthlog",
"symbol",
"trident",
"infinity",
"embed",
"webkitkeyframes",
"zoomin",
"zoominx",
"zoomoutx",
"zoominy",
"zoomouty",
"2000px",
"90deg",
"20px",
"30deg",
"30px",
"10px",
"10deg",
"3deg",
"5deg",
"djmegamenu",
"use license",
"tabindex",
"menu",
"close",
"msie",
"beforechange",
"imagehassize",
"buildcontrols",
"magnific popup",
"dmitry semenov",
"http",
"beforeclose",
"afterclose",
"open",
"next",
"open source",
"bsd license",
"george mcginley",
"smith",
"djimageslider",
"subpackage",
"webkit",
"khtml",
"icab",
"countto",
"callback",
"handler",
"object",
"typeof",
"method",
"gnugplv2",
"website",
"set module",
"height script",
"regexp",
"screenheight",
"highcontrast2",
"highcontrast3",
"highcontrast",
"wide",
"night",
"body",
"normalbutton",
"cookie plugin",
"https",
"klaus hartl",
"mit license",
"register",
"nodecommonjs",
"factory",
"jquery",
"write",
"sticky bar",
"stickybar",
"count",
"offcanvas",
"html",
"noscroll",
"offcanvas var",
"toggle nav",
"click jquery",
"ajax",
"autocomplete",
"tomas kirda",
"typeof define",
"esc27",
"tab9",
"return13",
"left37",
"up38",
"twitter",
"custom version",
"joomla",
"rolemenu",
"boolean",
"get adobe",
"flash player",
"title",
"text",
"typeof data",
"typeof s",
"accept",
"width",
"foundation",
"backspace8",
"comma188",
"delete46",
"down40",
"end35",
"enter13",
"escape27",
"value",
"migrate",
"backcompat",
"quirks mode",
"typeof f",
"xtablet768",
"document",
"ui sortable",
"leftright",
"gnu general",
"public license",
"dddddd",
"ffffcc",
"eeeeee",
"verdana",
"geneva",
"arial",
"helvetica",
"f0f0f0",
"sans",
"charset",
"utf8",
"fontawesome",
"typeof b",
"pseudo",
"child",
"sufeffxa0",
"class",
"attr",
"general slider",
"slide",
"rgba",
"navigation",
"15deg",
"300px",
"20deg",
"transition",
"scale",
"baskerville",
"main image",
"bdbdbd",
"f3f3f3",
"remove",
"fontface",
"woff2",
"u0131",
"u01520153",
"u02bb02bc",
"u02c6",
"u02da",
"u02dc",
"u0304",
"dirrtl",
"msviewport",
"href",
"span",
"legend",
"halflings",
"fieldset",
"typeimage",
"f2f2f2",
"d9edf7",
"dff0d8",
"f2dede",
"thead",
"tbody",
"tahoma",
"00a0",
"video",
"script",
"2500",
"xnew ita",
"dnew jta",
"dataset",
"orfunction",
"prfunction",
"nsafunction",
"xsafunction",
"vrfunction",
"cakes",
"ovbfunction",
"pvbfunction",
"rvbfunction",
"qvbfunction",
"tvbfunction",
"uvbfunction",
"vvbclass",
"xvbclass",
"yvbclass",
"svbclass",
"lvafunction",
"ggfunction",
"mvafunction",
"ovafunction",
"pvafunction",
"uvafunction",
"tvafunction",
"qvafunction",
"vvafunction",
"nvaclass",
"dark",
"vector",
"yy49",
"raster",
"roboto",
"new tk",
"qael",
"przechyl",
"mars",
"mercury",
"venus",
"pluto",
"titan",
"weakset",
"wfclass",
"googlelayer",
"uint8array",
"weakmap",
"5001",
"mouseevent",
"webassembly",
"180180",
"9090",
"google maps",
"javascript api",
"internal",
"small",
"lightrail",
"false",
"february",
"light",
"hybrid",
"bounce",
"drop",
"inside",
"outside",
"marker",
"gc"
],
"references": [
"embed.html",
"ad_status.js.pobrane",
"f5Y41t9wqY4.html",
"cast_sender.js.pobrane",
"remote.js.pobrane",
"sw3VTUzeRvWIVwvWSyk6S5gHWPxOOwU1OxerozmN4Hw.js.pobrane",
"embed.js.pobrane",
"www-embed-player.js.pobrane",
"animate.ext.css",
"animate.min.css",
"jquery.djmegamenu.js.pobrane",
"jquery.djmobilemenu.js.pobrane",
"magnific.js.pobrane",
"jquery.easing.min.js.pobrane",
"slider.js.pobrane",
"jquery.countTo.js.pobrane",
"scripts.js.pobrane",
"magnific-init.js.pobrane",
"pagesettings.js.pobrane",
"jquery.cookie.js.pobrane",
"stickybar.js.pobrane",
"fontswitcher.js.pobrane",
"offcanvas.js.pobrane",
"jquery.autocomplete.min.js.pobrane",
"bootstrap.min.js.pobrane",
"jcemediabox.js.pobrane",
"jquery.ui.core.min.js.pobrane",
"jquery-migrate.min.js.pobrane",
"layout.min.js.pobrane",
"jquery.ui.sortable.min.js.pobrane",
"caption.js.pobrane",
"finder.css",
"jquery-noconflict.js.pobrane",
"djmegamenu.26.css",
"animations.css",
"djmobilemenu.css",
"jquery.min.js.pobrane",
"djimageslider.css",
"offcanvas.css",
"magnific.css",
"font_switcher.26.css",
"css",
"template_responsive.26.css",
"offcanvas.26.css",
"bootstrap_responsive.26.css",
"extended_layouts.26.css",
"style.css",
"content.css",
"template.26.css",
"bootstrap.26.css",
"jcemediabox.css",
"js",
"onion.js.pobrane",
"search_impl.js.pobrane",
"overlay.js.pobrane",
"map.js.pobrane",
"util.js.pobrane",
"search.js.pobrane",
"common.js.pobrane",
"geometry.js.pobrane",
"main.js.pobrane"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [
{
"id": "Gc",
"display_name": "Gc",
"target": null
}
],
"attack_ids": [],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 26,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "Arek-BTC",
"id": "212764",
"avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 2779,
"hostname": 661,
"domain": 684,
"email": 4,
"FileHash-MD5": 1,
"FileHash-SHA256": 689
},
"indicator_count": 4818,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 122,
"modified_text": "310 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "663d2869e0f3a42bbddc42ff",
"name": "UPX executable packer.",
"description": "A new rule has been introduced a \"suspicious\" ELF binary that is packed with the UPX executable packer.\nSuggested ATT&CK IDs: rule SUSP_ELF_LNX_UPX_Compressed_File { meta: description = \"Detects a suspicious ELF binary with UPX compression\" author = \"Florian Roth (Nextron Systems)\" reference = \"Internal Research\" date = \"2018-12-12\" score = 40 hash1 = \"038ff8b2fef16f8ee9d70e6c219c5f380afe1a21761791e8cbda21fa4d09fdb4\" id = \"078937de-59b3-538e-a5c3-57f4e6050212\" strings: $s1 = \"PROT_EXEC|PROT_WRITE failed.\" fullword ascii $s2 = \"$Id: UPX\" fullword ascii $s3 = \"$Info: This file is packed with the UPX executable packer\" ascii $fp1 = \"check your UCL installation !\"",
"modified": "2024-10-14T00:01:17.069000",
"created": "2024-05-09T19:47:53.786000",
"tags": [
"cioch adrian",
"centrum usug",
"sieciowych",
"elf binary",
"upx compression",
"roth",
"nextron",
"info",
"javascript",
"html",
"office open",
"xml document",
"network capture",
"win32 exe",
"xml pakietu",
"pdf zestawy",
"przechwytywanie",
"office",
"filehashsha1",
"url https",
"cve cve20201070",
"cve cve20203153",
"cve cve20201048",
"cve cve20211732",
"cve20201048 apr",
"filehashmd5",
"cve cve20010901",
"cve cve20021841",
"cve20153202 apr",
"cve cve20160728",
"cve cve20161807",
"cve cve20175123",
"cve20185407 apr",
"cve cve20054605",
"cve cve20060745",
"cve cve20070452",
"cve cve20070453",
"cve cve20070454",
"cve cve20071355",
"cve cve20071358",
"cve cve20071871",
"cve20149614 apr",
"cve cve20151503",
"cve cve20152080",
"cve cve20157377",
"cve cve20170131",
"cve20200796 may",
"cve cve20113403"
],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [
{
"id": "T1027",
"name": "Obfuscated Files or Information",
"display_name": "T1027 - Obfuscated Files or Information"
}
],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 6861,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "Arek-BTC",
"id": "212764",
"avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"hostname": 5771,
"domain": 3139,
"URL": 14525,
"FileHash-SHA1": 2610,
"IPv4": 108,
"CIDR": 40,
"FileHash-SHA256": 10705,
"FileHash-MD5": 3373,
"YARA": 2,
"CVE": 148,
"Mutex": 7,
"FilePath": 3,
"SSLCertFingerprint": 3,
"email": 23,
"JA3": 1,
"IPv6": 2
},
"indicator_count": 40460,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 137,
"modified_text": "553 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708e2d7cb4228401888b63",
"name": "possibly a central bank",
"description": "",
"modified": "2023-12-06T15:07:25.990000",
"created": "2023-12-06T15:07:25.990000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 3,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 622,
"domain": 2558,
"URL": 4203,
"hostname": 1221,
"CVE": 1
},
"indicator_count": 8605,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708d657f0895a860febf8f",
"name": "SafeFrame Container",
"description": "",
"modified": "2023-12-06T15:04:05.932000",
"created": "2023-12-06T15:04:05.932000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 1416,
"domain": 2979,
"URL": 8250,
"hostname": 2262
},
"indicator_count": 14907,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 110,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708cc78755574d9812e4c8",
"name": "one google maps api call and one generic key - causing a large chunk of cyber disruption and compromise",
"description": "",
"modified": "2023-12-06T15:01:27.166000",
"created": "2023-12-06T15:01:27.166000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 135,
"hostname": 149,
"URL": 352,
"domain": 53
},
"indicator_count": 689,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708c8a9635f156e79238f1",
"name": "intel gained from a spam text",
"description": "",
"modified": "2023-12-06T15:00:26.727000",
"created": "2023-12-06T15:00:26.727000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"CVE": 1,
"FileHash-SHA256": 823,
"domain": 717,
"URL": 2245,
"hostname": 615,
"email": 4,
"FileHash-MD5": 5,
"FileHash-SHA1": 1
},
"indicator_count": 4411,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 110,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708c27074200c710e3b35c",
"name": "Malware hosting - metronetinc.com",
"description": "",
"modified": "2023-12-06T14:58:47.235000",
"created": "2023-12-06T14:58:47.235000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 3,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 447,
"hostname": 1241,
"domain": 536,
"URL": 3731
},
"indicator_count": 5955,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708c1c5e2cc4dfe8d0ed97",
"name": "CPANEL-TUCOWS \u2014malware hosting",
"description": "",
"modified": "2023-12-06T14:58:36.254000",
"created": "2023-12-06T14:58:36.254000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 815,
"hostname": 3487,
"domain": 1182,
"URL": 10194,
"FileHash-MD5": 3,
"FileHash-SHA1": 1
},
"indicator_count": 15682,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 111,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708c0f5981b6d81d0fa423",
"name": "data102 and colohouse. Malware hosting",
"description": "",
"modified": "2023-12-06T14:58:23.206000",
"created": "2023-12-06T14:58:23.206000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 458,
"domain": 557,
"URL": 2599,
"hostname": 952
},
"indicator_count": 4566,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708c0791fece390b1a096e",
"name": "Choopa.com - vultr",
"description": "",
"modified": "2023-12-06T14:58:15.734000",
"created": "2023-12-06T14:58:15.734000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 453,
"hostname": 1241,
"domain": 430,
"URL": 3454
},
"indicator_count": 5578,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708c01dca4e6c505e4fca0",
"name": "Hostgator - whitelisted",
"description": "",
"modified": "2023-12-06T14:58:09.135000",
"created": "2023-12-06T14:58:09.135000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 692,
"hostname": 1339,
"domain": 1260,
"URL": 4622,
"FileHash-MD5": 3,
"FileHash-SHA1": 1
},
"indicator_count": 7917,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708beba2ba8bcfb1d10237",
"name": "hostkey - Industroyer&ReduceRight",
"description": "",
"modified": "2023-12-06T14:57:47.430000",
"created": "2023-12-06T14:57:47.430000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 3,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 304,
"hostname": 563,
"domain": 407,
"URL": 1776,
"FileHash-SHA1": 2
},
"indicator_count": 3052,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65708b72abe90961af1737c9",
"name": "reCAPTCHA",
"description": "",
"modified": "2023-12-06T14:55:46.172000",
"created": "2023-12-06T14:55:46.172000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 362,
"domain": 330,
"URL": 1790,
"hostname": 586,
"email": 1
},
"indicator_count": 3069,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "865 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "657080d20f7e10c1e37fcf89",
"name": "TarrantCounty.com ~ 03.01.2022",
"description": "",
"modified": "2023-12-06T14:10:26.301000",
"created": "2023-12-06T14:10:26.301000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 1078,
"domain": 838,
"hostname": 1607,
"URL": 4134,
"email": 3,
"FileHash-SHA1": 2,
"CIDR": 4,
"FileHash-MD5": 15
},
"indicator_count": 7681,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "866 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65707fe17dfdfe16066d16de",
"name": "Bexar.org",
"description": "",
"modified": "2023-12-06T14:06:25.800000",
"created": "2023-12-06T14:06:25.800000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 1735,
"hostname": 1833,
"domain": 1025,
"URL": 4668,
"email": 4,
"FileHash-MD5": 133,
"FileHash-SHA1": 6,
"CIDR": 5
},
"indicator_count": 9409,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 110,
"modified_text": "866 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65707f8475d8a8785dfc5a2f",
"name": "Zetalytics API",
"description": "",
"modified": "2023-12-06T14:04:52.250000",
"created": "2023-12-06T14:04:52.250000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 754,
"hostname": 833,
"domain": 441,
"URL": 2375,
"CIDR": 5,
"FileHash-MD5": 2,
"email": 1
},
"indicator_count": 4411,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "866 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "65707e5b7df6f60133e8fb50",
"name": "Jeeng / Powerbox",
"description": "",
"modified": "2023-12-06T13:59:55.129000",
"created": "2023-12-06T13:59:55.129000",
"tags": [],
"references": [],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "green",
"cloned_from": null,
"export_count": 2,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "api",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "StreamMiningEx",
"id": "262917",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"CVE": 3,
"FileHash-SHA256": 9072,
"domain": 2500,
"hostname": 3584,
"URL": 13548,
"FileHash-MD5": 197,
"FileHash-SHA1": 162,
"email": 19,
"CIDR": 20,
"SSLCertFingerprint": 2,
"BitcoinAddress": 1
},
"indicator_count": 29108,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 109,
"modified_text": "866 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "634b4481d97a69446b750e82",
"name": "adsbygoogle.js hybrid-A ts 55/100 seems mych worse here",
"description": "",
"modified": "2022-10-15T23:52:08.907000",
"created": "2022-10-15T23:38:41.311000",
"tags": [
"sandbox",
"malware",
"analysis",
"online",
"submit",
"vxstream",
"sample",
"download",
"trojan",
"apt",
"ansi",
"memoryfile scan",
"error",
"null",
"string",
"runtime data",
"number",
"object",
"chrome",
"void",
"date",
"android",
"path",
"iframe",
"window",
"this",
"trident",
"meta",
"suspicious",
"infinity",
"hybrid",
"close",
"click",
"general",
"strings",
"malicious",
"august"
],
"references": [
"https://hybrid-analysis.com/sample/fbba6129666c709aae5bcc8f49cffc28ad0d0c6d5b22fb4ee69da66e5d5fd7d9/634753ff96b237006c46584e"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [
{
"id": "T1012",
"name": "Query Registry",
"display_name": "T1012 - Query Registry"
},
{
"id": "T1056",
"name": "Input Capture",
"display_name": "T1056 - Input Capture"
},
{
"id": "T1057",
"name": "Process Discovery",
"display_name": "T1057 - Process Discovery"
},
{
"id": "T1059",
"name": "Command and Scripting Interpreter",
"display_name": "T1059 - Command and Scripting Interpreter"
},
{
"id": "T1082",
"name": "System Information Discovery",
"display_name": "T1082 - System Information Discovery"
},
{
"id": "T1113",
"name": "Screen Capture",
"display_name": "T1113 - Screen Capture"
},
{
"id": "T1573",
"name": "Encrypted Channel",
"display_name": "T1573 - Encrypted Channel"
}
],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 6,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "callmeDoris",
"id": "205385",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"hostname": 62,
"URL": 835,
"domain": 65,
"FileHash-SHA256": 81,
"FileHash-MD5": 1,
"FileHash-SHA1": 1
},
"indicator_count": 1045,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 90,
"modified_text": "1282 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "62e1ca167a1591e7b4ca1129",
"name": "VirusTotal view-source on https://www.virustotal.com/en/file/undefined/analysis/",
"description": "someone really needs to figure out wtf this is all doing it has to be part of the net.sh",
"modified": "2022-07-28T02:05:04.183000",
"created": "2022-07-27T23:28:22.504000",
"tags": [
"array",
"object",
"typeof t",
"layer1",
"error",
"path",
"function",
"typeerror",
"date",
"svg export",
"span",
"null",
"unknown",
"click",
"february",
"april",
"june",
"august",
"this",
"void",
"bounce",
"string",
"regexp",
"number",
"sxa0",
"amptoken",
"optout",
"notfound",
"contenttype",
"form",
"copyright",
"element",
"polymer project",
"authors",
"bsd style",
"code",
"google",
"software",
"window",
"generator",
"comment",
"trident",
"typeof e",
"typeof symbol",
"typeof btoa",
"btoa",
"typeof reflect",
"boolean",
"customevent",
"plugin",
"build",
"home",
"intelligence",
"graph",
"report",
"urls",
"please",
"javascript",
"https://www.virustotal.com/en/file/undefined/analysis/",
"net.sh"
],
"references": [
"entity%3Aip%20whois%3Ainfo%40anodicnetwork.com.html",
"14.main.bundle.91f9f7ff635e0b797de3.js",
"5.main.bundle.e92e5e24e074f9c2a52b.js",
"0.main.bundle.a9d68f5204cd3ac257b6.js",
"webcomponent-polyfill.js",
"analytics.js",
"12.main.bundle.50be73a11d1d3745a5ee.js",
"\" Page not found >>16)*c&65535)<<16, as well as the Object, to be used as a decoder.",
"modified": "2022-05-10T00:02:48.350000",
"created": "2022-04-10T13:43:30.961000",
"tags": [
"arial",
"roboto",
"helvetica neue",
"typesubmit",
"webkitkeyframes",
"typeerror",
"typeof t",
"string",
"object",
"typeof e",
"symbol",
"typeof symbol",
"typeof window",
"typeof self",
"typeof r",
"date",
"body",
"html",
"typeof n",
"error",
"version",
"shown",
"click",
"dataspy",
"trident",
"window",
"lpmlightbox",
"messaging1",
"chat0",
"href",
"tabindex",
"copyright",
"closure library",
"info",
"smsclientapi",
"null",
"typeof",
"regexp",
"debug",
"chat",
"scraper",
"cookie",
"stop",
"iframe",
"explorer",
"small",
"seppuku",
"jsloader",
"token",
"viewed",
"kbcontentclick",
"blank",
"post",
"document",
"typeof storage",
"unknownerror",
"element",
"overquerylimit",
"requestdenied",
"zeroresults",
"notfound",
"node",
"edge",
"android",
"unknown",
"false",
"june",
"generator",
"marker",
"hybrid",
"month",
"azaz09",
"hours",
"function",
"number",
"fullyear",
"controller",
"christ",
"sufeffxa0",
"class",
"attr",
"pseudo",
"child",
"js foundation",
"typeof module",
"directclick",
"x22loansx22",
"x221x22",
"9o7nxzt",
"x22applyx22",
"x3dw",
"x3dnew",
"x22pageloadx22",
"x22scriptx22",
"x22uetqx22",
"viewcontent",
"addtocart",
"purchase",
"array",
"customevent",
"09af",
"ver0",
"tag0",
"extdata0",
"ua ch",
"invalid",
"license",
"calltrkswap",
"typeof s",
"xmlhttprequest",
"65535",
"awindow",
"cwm fjordbank",
"activexobject",
"tfunction",
"sfunction",
"yfunction",
"googlendt"
],
"references": [
"xfe-URL-ihagoogle.com-stix2-2.1-export.json",
"http://pagead2.googlesyndication.com/apps/domainpark/show_afd_ads.js",
"http://sedoparking.com/frmpark/ihagoogle.com/sedopark/park.js",
"http://instantfwding.com/px.js?ch=1",
"http://pxlgnpgecom-a.akamaihd.net/javascripts/browserfp.min.js?templateId=11&customerId=7CUHNT0E1",
"https://pxlgnpgecom-a.akamaihd.net/javascripts/bfp_ssn.js?templateId=11",
"https://s.thebrighttag.com/tag?site=9O7NXzt&H=-5nu6gjg&referrer=https%3A%2F%2Fwww.zealcu.org%2Fhome-loans%2F%3Fmsclkid%3D3ef1349815a11e52b0b256cacc0bc952%26utm_source%3Dbing%26utm_medium%3Dcpc%26utm_campaign%3DSearch%253A%2520Zeal%2520Credit%2520Union%2520-%2520Mortgages%26utm_term%3Dhouse%2520mortgage%26utm_content%3DMortgage%2520General&docReferrer=http%3A%2F%2Finstantfwding.com%2F&mode=v2&cf=7500150%2C7500152&btpdb.9O7NXzt.dGZjLjc1MDAxNTE=UkVRVUVTVFMuMA&btpdb.9O7NXzt.dGZjLjc1MTUyNDU=U0VTU0lPTg&btpdb.9O7N",
"https://cdn.callrail.com/companies/448598242/66d5efd6cbf06378ea1f/12/swap.js",
"https://bat.bing.com/bat.js",
"https://tag.perfectaudience.com/serve/5f59021d1911b61034000d8d.js",
"https://s.thebrighttag.com/tag?site=9O7NXzt&referrer=https%3A%2F%2Fwww.zealcu.org%2Fhome-loans%2F%3Fmsclkid%3D3ef1349815a11e52b0b256cacc0bc952%26utm_source%3Dbing%26utm_medium%3Dcpc%26utm_campaign%3DSearch%253A%2520Zeal%2520Credit%2520Union%2520-%2520Mortgages%26utm_term%3Dhouse%2520mortgage%26utm_content%3DMortgage%2520General&docReferrer=http%3A%2F%2Finstantfwding.com%2F&H=-5nu6gjg",
"https://code.jquery.com/jquery-3.4.1.min.js?ver=3.4.1",
"https://integration.silvercloudinc.com/js/bundle/vendor.js",
"https://maps.googleapis.com/maps/api/js?key=AIzaSyAMbtdeFB5s623T4LwRldWj_Vdy2t4wLkw&libraries=places",
"https://lptag.liveperson.net/tag/tag.js?site=22027291",
"https://integration.silvercloudinc.com/js/bundle/8.engageware-bundle.js",
"https://lptag.liveperson.net/lptag/api/account/22027291/configuration/applications/taglets/.jsonp?v=2.0&df=2&b=2",
"https://pixel-geo.prfct.co/tagjs?a_id=131352&source=js_tag",
"https://bat.bing.com/p/action/56358236.js",
"https://googleads.g.doubleclick.net/pagead/viewthroughconversion/388043112/?random=1649597062436&cv=9&fst=1649597062436&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635471&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=2&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0>m=2oa3u0&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.zealcu.org%2Fhome-loans%2F%3Fmsclkid%3D3ef1349815a11e52b0b256cacc0bc952%26utm_source%3Dbing%26utm_medium%3Dcpc%26utm_campaign%3DSearch%3A%2520Zeal%2520Credit%2520",
"https://lpcdn.lpsnmedia.net/le_re/3.50.0.1-release_5103/jsv2/overlay.js?_v=3.50.0.1-release_5103",
"https://www.zealcu.org/app/uploads/cache/js/aggregated_single_eb9d05879e4cb943b965deb3cccf05ee.js",
"https://integration.silvercloudinc.com/js/silvercloudjs/silvercloud.js",
"https://js.callrail.com/group/0/66d5efd6cbf06378ea1f/02836fdf-c99c-4a90-b31b-373093db654e/poll.js?t=1649597153888&ids%5B%5D=448598242",
"https://js.callrail.com/group/0/66d5efd6cbf06378ea1f/02836fdf-c99c-4a90-b31b-373093db654e/poll.js?t=1649598014683&ids%5B%5D=448598242",
"https://www.zealcu.org/app/uploads/cache/css/aggregated_cd3154a65f0e94fa98c08398cba54caa.css",
"https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfjFjMaAAAAACpmnf2RfTg2U2m4Cdnku25XccJW&co=aHR0cHM6Ly93d3cuemVhbGN1Lm9yZzo0NDM.&hl=en&v=Y-cOIEkAqcfDdup_qnnmkxIC&theme=light&size=normal&cb=j4msjl4zxy97",
"https://va.idp.liveperson.net/postmessage/postmessage.min.html?bust=1649597064004&loc=https%3A%2F%2Fwww.zealcu.org",
"https://bid.g.doubleclick.net/xbbe/pixel?d=KAE"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 3,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "adjadex1@gmail.com",
"id": "187163",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 1790,
"hostname": 586,
"FileHash-SHA256": 362,
"domain": 330,
"email": 1
},
"indicator_count": 3069,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 70,
"modified_text": "1441 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "626957a1170a7e91146c5dea",
"name": "one google maps api call and one generic key - causing a large chunk of cyber disruption and compromise",
"description": "",
"modified": "2022-04-27T14:48:01.672000",
"created": "2022-04-27T14:48:01.672000",
"tags": [
"error",
"element",
"unknownerror",
"overquerylimit",
"requestdenied",
"zeroresults",
"object",
"edge",
"node",
"android",
"null",
"trident",
"unknown",
"false",
"date",
"generator",
"iframe",
"marker",
"hybrid"
],
"references": [
"https://maps.googleapis.com/maps/api/js?key=AIzaSyBaRgbnzMy4cEMm5e2h7pyryfYav7ComTo"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 3,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "dorkingbeauty1",
"id": "80137",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 352,
"FileHash-SHA256": 135,
"hostname": 149,
"domain": 53
},
"indicator_count": 689,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 392,
"modified_text": "1453 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "6266f3fed330d1f702c04108",
"name": "piekids.us/MUiY37 - rushphone.net",
"description": "it was a secret mineral called \u201cThe New Fat Blocking Code\u2019s secret!",
"modified": "2022-04-25T19:18:22.610000",
"created": "2022-04-25T19:18:22.610000",
"tags": [
"f72210",
"f2f2f2",
"90deg",
"c0c0c0",
"ffffff",
"e3e3e3",
"45deg",
"month",
"b8b8b8",
"side",
"date",
"regexp",
"error",
"typeof b",
"pseudo",
"child",
"array",
"sufeffxa0",
"class",
"attr",
"typeof c",
"null",
"typeerror",
"typeof",
"facebook pixel",
"pixel code",
"symbol",
"iterator",
"constantvalue",
"globalvariable",
"facebook",
"string",
"object",
"boolean",
"function",
"service",
"phonenumber",
"meta",
"k3 spark",
"keto maxx",
"fat buring",
"mineral",
"emily",
"solution",
"new fat",
"blocking code",
"university",
"harvard",
"code",
"melissa",
"crazy",
"life",
"april",
"fast",
"austin",
"philadelphia",
"spin",
"mcmahon",
"click"
],
"references": [
"https://ddailyworkouts.com/tip/?art25=AP25CVA8",
"https://ddailyworkouts.com/tip/340185964810871",
"https://ddailyworkouts.com/tip/fbevents.js.download",
"https://ddailyworkouts.com/tip/jquery.min.js.download",
"https://ddailyworkouts.com/tip/dr-dtime.js.download",
"https://ddailyworkouts.com/tip/style.css"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [],
"attack_ids": [
{
"id": "T1566",
"name": "Phishing",
"display_name": "T1566 - Phishing"
}
],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 6,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "adjadex1@gmail.com",
"id": "187163",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 88,
"URL": 810,
"hostname": 250,
"domain": 87
},
"indicator_count": 1235,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 69,
"modified_text": "1455 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "625eecb6fbc4353a109fe71c",
"name": "hostkey - Industroyer&ReduceRight",
"description": "Fbevents-PostalCodeType:f.exports, f.1, is a new addition to the list of \"signals\" that can be added to phone numbers.",
"modified": "2022-04-19T17:09:10.196000",
"created": "2022-04-19T17:09:10.196000",
"tags": [
"livechat",
"sign up",
"free",
"grow",
"policy",
"sign",
"strong",
"sorry",
"identify",
"increase",
"lzutf8",
"typeerror",
"uint8array",
"array",
"error",
"typeof r",
"class",
"invalid",
"post",
"uint32array",
"date",
"null",
"papvisitorid",
"string",
"regexp",
"value",
"property",
"valuenumber",
"activexobject",
"postaffparams",
"object",
"number",
"boolean",
"typeof e",
"math",
"first",
"raid",
"window",
"service",
"ukraine",
"epsilon",
"arrow",
"target",
"keepalive",
"void",
"shell",
"econnaborted",
"hkwfunction",
"typeof symbol",
"function",
"promise",
"request",
"network error",
"livechatwidget",
"ticket form",
"prechat survey",
"postchat survey",
"typeof n",
"chat",
"blank",
"win32",
"iframe",
"reduceright",
"copyright",
"closure library",
"xdfunction",
"adfunction",
"cdfunction",
"ddfunction",
"bded",
"x3e div",
"trackevent",
"landingpagegpu",
"x3e table",
"gpudraw",
"path",
"code",
"functional",
"member",
"hnew regexp",
"qfunction",
"adview",
"addbillinginfo",
"addtocart",
"addtolist",
"contact",
"download",
"install",
"symbol",
"iterator",
"extractor",
"pixel",
"facebook",
"meta",
"65535",
"counter",
"segoe ui",
"lucida",
"ecommerce",
"ext link",
"comic",
"form",
"impact",
"light"
],
"references": [
"https://mc.yandex.ru/metrika/watch.js",
"https://connect.facebook.net/signals/config/785878845108827",
"https://snap.licdn.com/li.lms-analytics/insight.min.js",
"https://www.googletagmanager.com/gtm.js?id=GTM-M9D76H",
"https://www.googletagmanager.com/gtag/js?id=UA-73589630-1",
"https://cdn.livechatinc.com/tracking.js",
"https://rec.smartlook.com/main-20220331074633.js",
"https://hostkey.com/hk/widgets/ext/build/stock.bundle.js",
"https://hostkey.com/hk/widgets/ext/src/hostkey.js",
"https://hostkey.postaffiliatepro.com/scripts/Oy173jux8",
"https://hostkey.postaffiliatepro.com/scripts/Oy173rux8?accountld=default1&url=S_hostkey.com%2F&referrer=&isInlframe=false&getParams=&anchor=",
"https://widget.trustpilot.com/trustboxes/5613c9cde69ddc09340c6beb/index.html?templateld=5613c9cde69ddc09340c6beb&businessunitld=55e46b640000ff000582c91e#locale=en-GB&styleHeight=100%25&styleWidth=100%25&theme=light",
"https://secure.livechatinc.com/"
],
"public": 1,
"adversary": "",
"targeted_countries": [
"Tunisia"
],
"malware_families": [
{
"id": "ReduceRight",
"display_name": "ReduceRight",
"target": null
},
{
"id": "Industroyer - S0604",
"display_name": "Industroyer - S0604",
"target": null
}
],
"attack_ids": [
{
"id": "T1553",
"name": "Subvert Trust Controls",
"display_name": "T1553 - Subvert Trust Controls"
},
{
"id": "T1125",
"name": "Video Capture",
"display_name": "T1125 - Video Capture"
},
{
"id": "T1059",
"name": "Command and Scripting Interpreter",
"display_name": "T1059 - Command and Scripting Interpreter"
},
{
"id": "T1547",
"name": "Boot or Logon Autostart Execution",
"display_name": "T1547 - Boot or Logon Autostart Execution"
}
],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 8,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "adjadex1@gmail.com",
"id": "187163",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 1778,
"hostname": 563,
"FileHash-SHA256": 304,
"domain": 407,
"FileHash-SHA1": 2
},
"indicator_count": 3054,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 68,
"modified_text": "1461 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "625028edfe0ff22af87b9d66",
"name": "Virustotal.com",
"description": "If you want to know how to delete an object from your browser, try these three-second-long, four-point-result-results-free-to-get-it-out-the-objectIterator.",
"modified": "2022-04-08T12:22:05.307000",
"created": "2022-04-08T12:22:05.307000",
"tags": [
"symbol",
"object",
"string",
"denis pushkarev",
"json",
"corejs",
"source",
"etrt",
"atfunction",
"stfunction",
"error",
"typeerror",
"asynciterator",
"generator",
"typeof l",
"nonce",
"script",
"please do",
"not copy",
"and paste",
"this code",
"cgrecaptchacfg",
"ngrecaptcha",
"recaptchaapi",
"render",
"waaa",
"bufferwriter",
"bufferreader",
"qace",
"search",
"cafebabe",
"c2c url",
"jgfunilwcpc",
"gmbh",
"return",
"freemium gmbh",
"open xml",
"virustotal",
"keep learning",
"select",
"uint8array",
"array",
"null",
"function",
"math",
"edge",
"number",
"date",
"this",
"verify",
"android",
"iframe",
"void",
"trident",
"span",
"form",
"click",
"enterprise",
"infinity",
"template",
"next",
"body"
],
"references": [
"https://www.gstatic.com/recaptcha/releases/Y-cOIEkAqcfDdup_qnnmkxIC/recaptcha__en.js",
"https://www.virustotal.com/gui/main.6d41e0dc139508f21963.js",
"https://www.recaptcha.net/recaptcha/api.js?render=explicit",
"https://www.virustotal.com/gui/polyfills/regenerator-runtime.95dc763885f05111a2f88232a2d0cf2d.js",
"https://www.virustotal.com/gui/polyfills/core-js.c92df5c57caa3e436cd3ef38e4b4f503.js"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [
{
"id": "WAAA",
"display_name": "WAAA",
"target": null
},
{
"id": "QACE",
"display_name": "QACE",
"target": null
},
{
"id": "BufferReader",
"display_name": "BufferReader",
"target": null
},
{
"id": "BufferWriter",
"display_name": "BufferWriter",
"target": null
}
],
"attack_ids": [
{
"id": "T1027",
"name": "Obfuscated Files or Information",
"display_name": "T1027 - Obfuscated Files or Information"
},
{
"id": "T1059",
"name": "Command and Scripting Interpreter",
"display_name": "T1059 - Command and Scripting Interpreter"
},
{
"id": "T1140",
"name": "Deobfuscate/Decode Files or Information",
"display_name": "T1140 - Deobfuscate/Decode Files or Information"
},
{
"id": "T1547",
"name": "Boot or Logon Autostart Execution",
"display_name": "T1547 - Boot or Logon Autostart Execution"
},
{
"id": "T1566",
"name": "Phishing",
"display_name": "T1566 - Phishing"
},
{
"id": "T1568",
"name": "Dynamic Resolution",
"display_name": "T1568 - Dynamic Resolution"
}
],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 4,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "adjadex1@gmail.com",
"id": "187163",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"hostname": 392,
"URL": 1356,
"domain": 330,
"FileHash-SHA256": 177
},
"indicator_count": 2255,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 68,
"modified_text": "1473 days ago ",
"is_modified": false,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "62276abfaa65cd33f64331f8",
"name": "TarrantCounty.com ~ 03.01.2022",
"description": "",
"modified": "2022-04-07T00:04:02.553000",
"created": "2022-03-08T14:39:59.235000",
"tags": [
"march",
"lookup go",
"rescan add",
"verdict report",
"de summary",
"http",
"redirects links",
"behaviour",
"similar dom",
"content api",
"value",
"search url",
"search domain",
"scan url",
"url search",
"domain scan",
"url url",
"motor vehicle",
"aqb1",
"eventsevent10",
"meta",
"show",
"download go",
"full url",
"reverse dns",
"resource",
"windows nt",
"win64",
"khtml",
"gecko",
"response",
"main",
"milan",
"apache",
"paris",
"accept"
],
"references": [
"TarrantCounty3df.pdf",
"TarantCounty2df.pdf",
"TarrantCounty4df.pdf",
"TarrantCounty5df.pdf",
"tarrant23df.pdf",
"TarrantCounty1df.pdf",
"tarrantcounty.com:en:elections:Voter-Information:Voter- Registration.html%22,.pdf",
"TarrantCounty6df.pdf",
"TarrantCounty7df.pdf",
"TarrantCounty10df.pdf",
"TarrantCounty9df.pdf",
"TarrantCounty17df.pdf",
"TarrantCounty15df.pdf",
"TarrantCounty12df.pdf",
"TarrantCounty14df.pdf",
"tarrantcounty8df.pdf",
"TarrantCounty18df.pdf",
"TarrantCounty19df.pdf",
"TarrantCounty21df.pdf",
"tarrantcounty22df.pdf",
"TarrantCounty20df.pdf",
"tarrantcountydf.pdf"
],
"public": 1,
"adversary": "",
"targeted_countries": [
"United States of America"
],
"malware_families": [],
"attack_ids": [],
"industries": [
"Government"
],
"TLP": "white",
"cloned_from": null,
"export_count": 6,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "Kailula4",
"id": "131997",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"URL": 4134,
"hostname": 1607,
"domain": 838,
"FileHash-SHA256": 1078,
"FileHash-SHA1": 2,
"email": 3,
"CIDR": 4,
"FileHash-MD5": 15
},
"indicator_count": 7681,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 406,
"modified_text": "1474 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "621fff12d2c54f70fea90576",
"name": "Bexar.org",
"description": "",
"modified": "2022-04-01T00:01:54.852000",
"created": "2022-03-02T23:34:42.531000",
"tags": [],
"references": [
"www.bexar.org - urlscan.io.pdf",
"bexar api 4.pdf",
"bexar api 8.pdf",
"bexar 6.pdf",
"bexar api 2.pdf",
"bexar api 7.pdf",
"bexar api 3.pdf",
"bexar api 9.pdf",
"bexar api 12.pdf",
"bexar api 17.pdf",
"bexar api 15.pdf",
"bexar api 18.pdf",
"bexar api 10.pdf",
"bexar api 19.pdf",
"bexar api 20.pdf",
"bexar api 13.pdf",
"bexar api 21.pdf",
"bexar api 14.pdf",
"bexar api 22.pdf",
"bexar1.pdf",
"bexar api5.pdf",
"bexar2.pdf",
"bexar3.pdf",
"bexar.org 3.2.22.pdf",
"bexar6.pdf",
"bexar5.pdf",
"bexar api_1.pdf",
"bexar10.pdf",
"bexar api.pdf",
"bexar_v1df.pdf",
"bexarv4df.pdf",
"bexarv2df.pdf",
"bexarv6df.pdf",
"bexasv3df.pdf",
"bexarv7df.pdf",
"bear_v apidf.pdf"
],
"public": 1,
"adversary": "",
"targeted_countries": [
"United States of America"
],
"malware_families": [],
"attack_ids": [],
"industries": [
"Government"
],
"TLP": "white",
"cloned_from": null,
"export_count": 7,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "Kailula4",
"id": "131997",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"hostname": 1833,
"URL": 4669,
"domain": 1025,
"FileHash-SHA256": 1735,
"email": 4,
"FileHash-MD5": 133,
"FileHash-SHA1": 6,
"CIDR": 5
},
"indicator_count": 9410,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 407,
"modified_text": "1480 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
},
{
"id": "621bc3aa050a6c5693595f25",
"name": "Zetalytics API",
"description": "",
"modified": "2022-03-29T00:03:34.773000",
"created": "2022-02-27T18:32:10.542000",
"tags": [
"google",
"google llc",
"detected",
"expand overall",
"http",
"amazonaes",
"openssl",
"lookup go",
"rescan add",
"verdict report",
"behaviour",
"june",
"apache",
"search url",
"search domain",
"scan url",
"url search",
"domain scan",
"url url",
"us summary",
"line",
"google maps",
"api warning",
"redirects links",
"similar dom",
"content api",
"domains",
"Ransomware"
],
"references": [
"zetalytics .pdf"
],
"public": 1,
"adversary": "",
"targeted_countries": [],
"malware_families": [
{
"id": "Win.Virus.PolyRansom-5704625-0",
"display_name": "Win.Virus.PolyRansom-5704625-0",
"target": null
},
{
"id": "Win32:Cryptor",
"display_name": "Win32:Cryptor",
"target": null
},
{
"id": "TELPER:CERT:SoftwareBundler:Win32/Bunpredelt",
"display_name": "TELPER:CERT:SoftwareBundler:Win32/Bunpredelt",
"target": null
},
{
"id": "Trojan:Win32/Danabot.G",
"display_name": "Trojan:Win32/Danabot.G",
"target": "/malware/Trojan:Win32/Danabot.G"
},
{
"id": "Backdoor:Win32/Poison.E",
"display_name": "Backdoor:Win32/Poison.E",
"target": "/malware/Backdoor:Win32/Poison.E"
},
{
"id": "ALF:PUA:Block:IObit.R!MTB",
"display_name": "ALF:PUA:Block:IObit.R!MTB",
"target": null
}
],
"attack_ids": [],
"industries": [],
"TLP": "white",
"cloned_from": null,
"export_count": 5,
"upvotes_count": 0,
"downvotes_count": 0,
"votes_count": 0,
"locked": false,
"pulse_source": "web",
"validator_count": 0,
"comment_count": 0,
"follower_count": 0,
"vote": 0,
"author": {
"username": "Kailula4",
"id": "131997",
"avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
"is_subscribed": false,
"is_following": false
},
"indicator_type_counts": {
"FileHash-SHA256": 754,
"URL": 2375,
"domain": 441,
"hostname": 833,
"CIDR": 5,
"FileHash-MD5": 2,
"email": 1
},
"indicator_count": 4411,
"is_author": false,
"is_subscribing": null,
"subscriber_count": 406,
"modified_text": "1483 days ago ",
"is_modified": true,
"groups": [],
"in_group": false,
"threat_hunter_scannable": true,
"threat_hunter_has_agents": 1,
"related_indicator_type": "URL",
"related_indicator_is_active": 1
}
],
"references": [
"http://pxlgnpgecom-a.akamaihd.net/javascripts/browserfp.min.js?templateId=11&customerId=7CUHNT0E1",
"https://js.stripe.com/v3",
"https://secure.gaug.es/track.js",
"https://js.mollie.com/v1/mollie.js",
"https://www.googletagmanager.com/gtag/js?id=UA-184179078-",
"https://www.leaseweb.com/sites/default/files/js/js_6lTJ_m6ahwXas7Efbw8ZYEMSaecrGw8ilNALfvIPNUw.js",
"embed.js.pobrane",
"jquery-migrate.min.js.pobrane",
"djmobilemenu.css",
"https://www.metronetinc.com/wp-content/plugins/pixel-caffeine/build/frontend.js?ver=2.3.3",
"https://connect.facebook.net/signals/config/534474930374151?v=2.9.57&r=stable",
"https://pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=33566&account_id=872471&title=Hosting%20Platform%20of%20Choice&url=https%3A%2F%2Fcpanel.net%2F&referrer=",
"bexar api.pdf",
"https://www.leaseweb.com/sites/default/files/js/js_zoLA7TweXam0kYiqJrXepqBWmyDoP1sLSlHoZcveFnY.js",
"https://tobiasahlin.com/js/app.js?v=1",
"http://dk9ctyhidjrvgn.xyz/index_files/sss.css",
"xfe-URL-Cpanel.com-stix2-2.1-export.json",
"https://embed.tawk.to/_s/v4/app/625d36b405c/js/twk-chunk-2d0d2b7c.js",
"xfe-URL-insurancerateusa.com-stix2-2.1-export.json",
"https://widget.intercom.io/widget/j3kafOpd",
"https://s.adroll.com/j/sendrolling.js",
"https://app-lon04.marketo.com/js/forms2/css/forms2-theme-plain.css",
"https://www.metronetinc.com/wp-content/themes/MetroNet/js/flexslider-init.js?ver=5.8.4",
"animate.min.css",
"https://www.metronetinc.com/wp-content/plugins/atomic-blocks/dist/assets/js/dismiss.js?ver=1625889728",
"https://script.hotjar.com/survey-v2.3716506838f2208ab9e2.js",
"https://cpanel.net/wp-content/themes/cPbase/assets/css/version96.css",
"https://connect.facebook.net/signals/config/285857426541675?v=2.9.57&r=stable",
"https://colohouse.com/wp-content/plugins/cleantalk-spam-protect/js/apbct-public.min.js?ver=5.173",
"https://app-ab02.marketo.com/index.php/form/XDFrame",
"bexar api 19.pdf",
"https://bilety.polregio.pl",
"https://www.googletagmanager.com/gtag/js?id=G-7BE8PMLSKX&l=dataLayer&cx=c",
"search_impl.js.pobrane",
"https://colohouse.com/wp-content/plugins/wpcf7-redirect/build/js/wpcf7-redirect-frontend-script.js?ver=1.1",
"https://c.cnzz.com/core.php?web_id=1280305902&t=z",
"https://www.googletagmanager.com/gtm.js?id=GTM-W3GQ4F",
"util.js.pobrane",
"https://www.googletagmanager.com/gtm.js?id=GTM-M9D76H",
"slider.js.pobrane",
"https://www.ascio.com/wp-includes/js/dist/vendor/react-dom.min.js?ver=17.0.1",
"https://bat.bing.com/bat.js",
"https://lordseriala.life/6337-zvezdnye-vojny-opornaja-komanda.html",
"bexar api 10.pdf",
"https://script.tapfiliate.com/tapfiliate.js",
"TarrantCounty9df.pdf",
"https://www.googletagmanager.com/gtm.js?id=GTM-WRDF3CB",
"https://widget.intercom.io/widget/e1nqrt2k",
"https://rec.smartlook.com/main-20220331074633.js",
"https://cdn.pendo.io/agent/static/783a696b-ddf4-4152-439e-f3761f54f088/pendo.js",
"https://static.ads-twitter.com/uwt.js",
"https://cdn.iubenda.com/cs/iubenda_Cs.js",
"https://www.choopa.com/_js/global.js?v=209",
"https://colohouse.com/wp-content/themes/Netrouting/assets/chosen/chosen.jquery.min.js",
"bexarv4df.pdf",
"tarrantcounty.com:en:elections:Voter-Information:Voter- Registration.html%22,.pdf",
"https://widget.wickedreports.com/widget.js",
"geometry.js.pobrane",
"TarrantCounty6df.pdf",
"extended_layouts.26.css",
"https://j.clarity.ms/s/0.6.34/clarity.js",
"https://hostkey.postaffiliatepro.com/scripts/Oy173rux8?accountld=default1&url=S_hostkey.com%2F&referrer=&isInlframe=false&getParams=&anchor=",
"djimageslider.css",
"https://app.uizard.io/p/c69fa2aa",
"TarrantCounty10df.pdf",
"https://unpkg.com/@lottiefiles/lottie-player@1.5.7/dist/lottie-player.js",
"https://www.ascio.com/wp-content/themes/Ascio/dist/js/front.js?ver=1648137806",
"https://app.whoisvisiting.com/who.js",
"https://securepubads.g.doubleclick.net/tag/js/gpt.js",
"TarrantCounty7df.pdf",
"https://6241250.fls.doubleclick.net/activityi;src=6241250;type=remar0;cat=hg-al0;ord=1;num=152669004837;gtm=2wg4i1;auiddc=30830049.1650396032;u1=prospect;u2=%2F;u5=noConsent-none;~oref=https%3A%2F%2Fwww.hostgator.com%2F",
"fontswitcher.js.pobrane",
"js",
"xfe-URL-pi.pardot.com-stix2-2.1-export.json",
"https://use.fortawesome.com/03018d9d.js",
"magnific-init.js.pobrane",
"tarrantcounty22df.pdf",
"bexarv2df.pdf",
"https://connect.facebook.net/signals/config/2196524664009793?v=2.9.57&r=stable",
"https://portal.ascio.com/7.602be6705ce7b901b821.js",
"https://script.hotjar.com/modules.0076bf93c385ddf0ff58.js",
"offcanvas.css",
"https://cop.supply/proxies-lists/ \u2022 https://cop.supply/shopify-bots/",
"https://hostkey.com/hk/widgets/ext/src/hostkey.js",
"http://www.salesmanago.pl/static/sm.js",
"jquery.countTo.js.pobrane",
"https://googleads.g.doubleclick.net/pagead/viewthroughconversion/858656304/?random=1650403054497&cv=9&fst=1650403054497&num=1&guid=ON&resp=GooglemKTybQhCsO&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=3&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.vultr.com%2F&tiba=SSD%20VPS%20Servers%2C%20Cloud%20Servers%20and%20Cloud%20Hosting%20by%20Vultr%20-%20Vultr.com&hn=www.googleadservices.com&rfmt=3&fmt=4",
"xfe-URL-Choopa.com-stix2-2.1-export.json",
"https://www.hostgator.com/_next/static/5a0OWA7iirtDqpl2xeXE4/_buildManifest.js",
"https://connect.facebook.net/signals/config/785878845108827",
"jquery.easing.min.js.pobrane",
"https://embed.tawk.to/_s/v4/app/625d36b405c/js/twk-runtime.js",
"TarrantCounty14df.pdf",
"cell-0.af-south-1.prod.telemetry.console.api.aws",
"https://www.metronetinc.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0",
"https://cpanel.net/wp-content/themes/cPbase/assets/css/roadmap.css",
"https://www.data102.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp",
"https://himado.com/heihei/node_modules/mdui/dist/js/mdui.min.js",
"https://insurancerateusa.com/framework-19eddc0d879a49dfe606.js",
"map.js.pobrane",
"bexar api5.pdf",
"https://www.googletagmanager.com/gtag/js?id=G-C3W7T6H5QW&l=dataLayer&cx=c",
"jquery.djmegamenu.js.pobrane",
"https://integration.silvercloudinc.com/js/bundle/8.engageware-bundle.js",
"https://www.googletagmanager.com/gtag/js?id=AW-1070742489",
"https://cdn.optimizely.com/js/13477600374.js",
"https://colohouse.com/wp-content/plugins/stop-user-enumeration/frontend/js/frontend.js?ver=1.3.31",
"https://www.googletagmanager.com/gtag/js?id=AW-1070742489&l=dataLayer&cx=c",
"onion.js.pobrane",
"https://www.leaseweb.com/sites/default/files/js/js_kwxcSFD2Y0_BPtdJClYUy5H8THI_5EycUmIgIGWaGYs.js",
"https://prima-abnehmen-shop.com/_Resources/Static/Packages/Seven.Prima/Scripts/Main.js?bust=2a0b1c62",
"https://www.hostgator.com/_next/static/runtime/main-a00d7acfcccd82e343f6.js",
"https://www.google-analytics.com/plugins/ua/linkid.js",
"https://www.googletagmanager.com/gtag/js?id=G-K6536FHN4D&l=dataLayer&cx=c",
"https://static.zdassets.com/ekr/snippet.js?key=d814ea4a-a8eb-4a9c-aedd-cac0aa0e3551",
"style.css",
"https://static.cloudflareinsights.com/beacon.min.js",
"https://s.adroll.com/j/roundtrip.js",
"https://colohouse.com/wp-content/plugins/link-whisper-premium/js/frontend.js?ver=1632756485",
"https://www.ascio.com/wp-includes/js/dist/hooks.min.js?ver=1e58c8c5a32b2e97491080c5b10dc71c",
"https://app-lon04.marketo.com/js/forms2/js/forms2.min.js",
"https://cpanel.net/wp-includes/js/wp-emoji-release.min.js?ver=5.6",
"https://www.googletagmanager.com/gtag/js?id=UA-122335014-2",
"https://secure.livechatinc.com/",
"https://app-ab02.marketo.com/js/forms2/js/forms2.min.js",
"dns.army \u2022 www.dcopr.dns.army \u2022 www.glsyaiwjj.dns.army \u2022 www.wgmvk.dns.army",
"archive.cop.supply \u2022 dev.cop.supply \u2022 https://cop.supply/ \u2022 https://cop.supply/bot-lists/",
"https://www.hostgator.com/_next/static/chunks/framework.4fc08a4a599cac03ddf5.js",
"https://ddailyworkouts.com/tip/?art25=AP25CVA8",
"jquery-noconflict.js.pobrane",
"https://colohouse.com/wp-content/plugins/wp-schema-pro/admin/assets/min-js/frontend.min.js?ver=2.7.2",
"bexarv6df.pdf",
"https://pro.fontawesome.com/releases/v5.13.1/css/all.css",
"offcanvas.26.css",
"https://static.zdassets.com/ekr/snippet.js?key=e7dd7ff5-a219-47a1-b096-069f750c234f",
"https://pi.pardot.com/pd.js",
"https://himado.com/heihei/js/swiper.min.js",
"https://googleads.g.doubleclick.net/pagead/viewthroughconversion/952389962/?random=1650405011982&cv=9&fst=1650405011982&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635471&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0>m=2wg4i1&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.leaseweb.com%2F&tiba=Leaseweb%20%7C%20Global%20Hosted%20Infrastructure%20(IaaS)%20and%20Cloud%20Solutions&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4",
"https://public.profitwell.com/js/profitwell.js?auth=80939adc88898a29e714f6dd3d25e8ba",
"https://tag.perfectaudience.com/serve/5f59021d1911b61034000d8d.js",
"Everyone has simply asked you alll to stop. Target never asked anyone for money.",
"https://tobiasahlin.com/js/anime.min.js",
"https://www.choopa.com/css/global.css?v=209",
"https://www.googletagmanager.com/gtm.js?id=GTM-MF25KRH",
"https://js.callrail.com/group/0/7c8f964bc12313c75ad2/06ababf0-8852-4eef-95e1-285ae467a93a/poll.js?t=1651861725881&ids%5B%5D=431115301",
"common.js.pobrane",
"https://khmerpornvideo.signup0.y.id/",
"https://munchkin.marketo.net/161/munchkin.js",
"https://connect.facebook.net/signals/config/571256413046247?v=2.9.57&r=stable",
"https://maps.googleapis.com/maps/api/js?key=AIzaSyAMbtdeFB5s623T4LwRldWj_Vdy2t4wLkw&libraries=places",
"https://cdn.callrail.com/companies/448598242/66d5efd6cbf06378ea1f/12/swap.js",
"https://eu-library.klarnaservices.com/lib.js",
"f5Y41t9wqY4.html",
"http://ianswertomom.com/develop-wise-woman-within-yourself",
"TarantCounty2df.pdf",
"template_responsive.26.css",
"bexar api 22.pdf",
"https://www.metronetinc.com/wp-content/plugins/lt-ajax-mn-channelguide/jquery-ui.min.js?ver=1.2",
"https://www.googletagmanager.com/gtag/js?id=UA-73589630-1",
"https://tracking.premiumhealth.eu/code.js",
"https://securepubads.g.doubleclick.net/gpt/pubads_impl_2022050201.js",
"https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfjFjMaAAAAACpmnf2RfTg2U2m4Cdnku25XccJW&co=aHR0cHM6Ly93d3cuemVhbGN1Lm9yZzo0NDM.&hl=en&v=Y-cOIEkAqcfDdup_qnnmkxIC&theme=light&size=normal&cb=j4msjl4zxy97",
"https://cdn3.optimizely.com/js/geo4.js",
"https://149371662.v2.pressablecdn.com/wp-content/plugins/user-verification/assets/front/js/scripts-otp.js",
"https://11057407.fls.doubleclick.net/activityi;src=11057407;type=count0;cat=sitev0;ord=1;num=5426507653008;gtm=2wg4i1;auiddc=1460077727.1650429649;~oref=https%3A%2F%2Fwww.metronetinc.com%2F",
"https://www.data102.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1",
"https://embed.tawk.to/_s/v4/app/625d36b405c/js/twk-chunk-vendors.js",
"0.main.bundle.a9d68f5204cd3ac257b6.js",
"http://ianswertomom.com/bible-verses-struggling-contentment-mom/ I",
"bexar api 3.pdf",
"https://bat.bing.com/p/action/56358236.js",
"TarrantCounty20df.pdf",
"https://www.1.cpanel.net/analytics?conly=true&visitor_id=311218274&visitor_id_sign=3e1116a56bfd91923fe15cac565b502779c6ec3fe7449557f3940ba04e77079951b9efb044c2275f4211d26742585a9d14544eae&pi_opt_in=&campaign_id=33566&account_id=872471&title=Hosting%20Platform%20of%20Choice&url=https://cpanel.net/&referrer=",
"https://www.ascio.com/wp-includes/js/dist/i18n.min.js?ver=30fcecb428a0e8383d3776bcdd3a7834",
"https://maps.googleapis.com/maps/api/js?key=AIzaSyBaRgbnzMy4cEMm5e2h7pyryfYav7ComTo",
"https://eu.snapengage.com/chatjs/servicegetallavailableagents?w=e9219576-8f74-40b5-8b6f-bbad33f6ca57&t=1",
"https://cdn.heapanalytics.com/js/heap-2001511295.js",
"https://googleads.g.doubleclick.net/pagead/viewthroughconversion/646812378/?random=1650430003991&cv=9&fst=1650430003991&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635471&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=3&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0>m=2wg4i1&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.metronetinc.com%2F&tiba=MetroNet%20%E2%80%93%20100%25%20Fiber%20Optic%20Internet%20%E2%80%93%20100%25%20Fiber%20Optic%20Internet%2C%20Streaming%20TV%2C%20and%20Phone&hn=www.googleadservic",
"https://www.googletagmanager.com/gtm.js?id=GTM-PPNLL2",
"https://ddailyworkouts.com/tip/340185964810871",
"TarrantCounty5df.pdf",
"https://embed.tawk.to/_s/v4/app/625d36b405c/js/twk-chunk-f163fcd0.js",
"https://consentcdn.cookiebot.com/consentconfig/da52fc49-8e48-42b7-9ad3-c219404f6f92/cpanel.net/configuration.js",
"xfe-URL-colohouse.com-stix2-2.1-export.json",
"https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js",
"https://cdn.eu.pendo.io/agent/static/82b060a2-2cf8-472e-55d4-bd0833416335/pendo.js",
"jcemediabox.css",
"https://connect.facebook.net/signals/config/438248060937995?v=2.9.57&r=stable",
"bootstrap_responsive.26.css",
"djmegamenu.26.css",
"bexar_v1df.pdf",
"https://www.choopa.com/commonimages/jquery-3.5.1.min.js",
"www-embed-player.js.pobrane",
"Attacks are being carried out by The State of Colorado",
"https://www.fmglaw.com/lawyers/christopher-ahmann - found in adult content pulse.",
"bexasv3df.pdf",
"xfe-URL-Hush.com-stix2-2.1-export.json",
"https://js.callrail.com/group/0/7c8f964bc12313c75ad2/06ababf0-8852-4eef-95e1-285ae467a93a/poll.js?t=1651861793229&ids%5B%5D=431115301",
"jquery.autocomplete.min.js.pobrane",
"https://www.virustotal.com/gui/polyfills/core-js.c92df5c57caa3e436cd3ef38e4b4f503.js",
"TarrantCounty18df.pdf",
"xfe-URL-lodash.com-stix2-2.1-export.json",
"entity%3Aip%20whois%3Ainfo%40anodicnetwork.com.html",
"xfe-IP-146.148.236.187-stix2-2.1-export.json",
"https://code.jquery.com/jquery-3.4.1.min.js?ver=3.4.1",
"bexar api 15.pdf",
"https://www.redditstatic.com/ads/pixel.js",
"animations.css",
"https://a2.adform.net/Serving/TrackPoint/?pm=508052&ADFPageName=Metronet%7CHomepage&ADFdivider=%7C&ord=735079476141&Set1=en-US%7Cen-US%7C390x844%7C32&ADFtpmode=2&loc=https%3A%2F%2Fwww.metronetinc.com%2F",
"analytics.js",
"https://ddailyworkouts.com/tip/style.css",
"https://googleads.g.doubleclick.net/pagead/viewthroughconversion/388043112/?random=1649597062436&cv=9&fst=1649597062436&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635471&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=2&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0>m=2oa3u0&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.zealcu.org%2Fhome-loans%2F%3Fmsclkid%3D3ef1349815a11e52b0b256cacc0bc952%26utm_source%3Dbing%26utm_medium%3Dcpc%26utm_campaign%3DSearch%3A%2520Zeal%2520Credit%2520",
"http://sedoparking.com/frmpark/ihagoogle.com/sedopark/park.js",
"tarrantcounty8df.pdf",
"https://embed.tawk.to/_s/v4/app/625d36b405c/js/twk-main.js",
"https://www.iubenda.com/cookie-solution/confs/js/33942990.js",
"https://www.hostgator.com/_next/static/5a0OWA7iirtDqpl2xeXE4/pages/_app.js",
"https://www.zealcu.org/app/uploads/cache/css/aggregated_cd3154a65f0e94fa98c08398cba54caa.css",
"https://integration.silvercloudinc.com/js/silvercloudjs/silvercloud.js",
"https://ascio.com",
"xfe-URL-uizard.io-stix2-2.1-export.json",
"https://www.metronetinc.com/wp-content/plugins/lt-ajax-mn-channelguide/lt-ajax-mn-channelguide.js?ver=1.1",
"xfe-URL-vx-underground.org_Conti_-stix2-2.1-export.json",
"https://www.googletagmanager.com/gtm.js?id=GTM-PTXLXZ4",
"https://insurancerateusa.com/app-74647f151b541f3098c2.js",
"https://cdn.cookielaw.org/scripttemplates/6.32.0/otBannerSdk.js",
"https://connect.facebook.net/en_US/fbevents.js",
"https://googleads.g.doubleclick.net/pagead/viewthroughconversion/982771034/?random=1650430003990&cv=9&fst=1650430003990&num=1&label=Remarketing%20-%20All%20Pages&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635471&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=3&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0>m=2wg4i1&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.metronetinc.com%2F&tiba=MetroNet%20%E2%80%93%20100%25%20Fiber%20Optic%20Internet%20%E2%80%93%20100%25%20Fiber%20Optic%20Internet%2C%20Streaming%20TV%2C",
"14.main.bundle.91f9f7ff635e0b797de3.js",
"https://portal.ascio.com/runtime.48adad1e07e2679eb1f4.js",
"https://colohouse.com/wp-content/plugins/cookie-law-info/public/js/cookie-law-info-public.js?ver=2.0.4",
"firebase-auth-eich0v.pages.dev",
"https://i-want-to-start-an-onlyfans.pages.dev/favicon.ico| I bet you do boo boo",
"https://pixel-geo.prfct.co/tagjs?a_id=131352&source=js_tag",
"bootstrap.26.css",
"https://www.metronetinc.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.4",
"caption.js.pobrane",
"TarrantCounty12df.pdf",
"https://securepubads.g.doubleclick.net/gpt/pubads_impl_page_level_ads_2022050201.js",
"https://www.leaseweb.com/sites/all/modules/custom/lsw_marketo/js/lsw_marketo_forms.js",
"https://storage.googleapis.com/inflect-frontend-assets/adb460de2098568d4c3580de1fde2f6690bcbd04/_next/static/s0TytVz2d0zNgb~bjg~~D/pages/search.js",
"TarrantCounty3df.pdf",
"bear_v apidf.pdf",
"http://dk9ctyhidjrvgn.xyz/index_files/jquery.js",
"https://lptag.liveperson.net/tag/tag.js?site=22027291",
"bexar api 21.pdf",
"https://embed.tawk.to/_s/v4/app/625d36b405c/js/twk-chunk-2d0b9454.js",
"https://app-ab02.marketo.com/js/forms2/css/forms2-theme-simple.css",
"https://ssl.google-analytics.com/ga.js",
"https://www.hushmail.com/status/",
"https://cpanel.net/wp-content/themes/cPbase/assets/js/dist/script.js?ver=5.6",
"https://www.googleadservices.com/pagead/conversion/646812378/?random=1650430003991&cv=9&fst=1650430003991&num=1&value=0&label=6dFBCIm13s4BENqltrQC&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635471&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=3&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0>m=2wg4i1&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.metronetinc.com%2F&tiba=MetroNet%20%E2%80%93%20100%25%20Fiber%20Optic%20Internet%20%E2%80%93%20100%25%20Fiber%20Optic%20Internet%2C%20Streaming%20TV%2C%20and%20Phone&",
"TarrantCounty15df.pdf",
"https://ddailyworkouts.com/tip/jquery.min.js.download",
"https://www.youtube.com/s/player/19eb72e4/www-widgetapi.vflset/www-widgetapi.js",
"bexar api 13.pdf",
"dev-app.project-cicada.com \u2022 http://dev-app.project-cicada.com \u2022 https://dev-app.project-cicada.com (2014 report predates 2016 reports)",
"https://js.partnerstack.com/v1/",
"content.css",
"https://widget.trustpilot.com/trustboxes/5613c9cde69ddc09340c6beb/index.html?templateld=5613c9cde69ddc09340c6beb&businessunitld=55e46b640000ff000582c91e#locale=en-GB&styleHeight=100%25&styleWidth=100%25&theme=light",
"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.iTmf4rxOyWc.O/m=auth2/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-LTnDn-AS2QlMWYZdnaV1OuFR7Iw/cb=gapi.loaded_0?le=scs",
"https://colohouse.com/",
"http://bilety.polregio.pl",
"bexar api 4.pdf",
"https://colohouse.com/wp-content/plugins/cleantalk-spam-protect/js/cleantalk-modal.min.js?ver=5.173",
"https://www.googletagmanager.com/gtm.js?id=GTM-MDCVHGD",
"https://a2.adform.net/serving/scripts/trackpoint/async/",
"https://bat.bing.com/p/action/17528422.js",
"https://ddailyworkouts.com/tip/dr-dtime.js.download",
"https://www.leaseweb.com/sites/default/files/js/js_wcSNEXVJ4Xjhkf8qhMguEPZJTDTMNmPaJM-YWdAOhQE.js",
"https://www.zealcu.org/app/uploads/cache/js/aggregated_single_eb9d05879e4cb943b965deb3cccf05ee.js",
"www.bexar.org - urlscan.io.pdf",
"12.main.bundle.50be73a11d1d3745a5ee.js",
"https://colohouse.com/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-form-move-tracker.js?ver=1.13.1",
"https://colohouse.com/wp-includes/js/wp-embed.min.js?ver=5.8",
"https://colohouse.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8",
"https://my.choopa.com/js/jquery-3.5.1.min.js",
"https://www.youtube.com/iframe_api",
"xfe-URL-himado.com-stix2-2.1-export.json",
"https://colohouse.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7",
"https://www.gstatic.com/firebasejs/8.1.2/firebase-app.js",
"https://www.googletagmanager.com/gtm.js?id=GTM-NWPHSS",
"https://www.googletagmanager.com/gtm.js?id=GTM-WB4LHQ4",
"https://consent.cookiebot.com/uc.js",
"search.js.pobrane",
"https://cdn.getaddress.io/scripts/getaddress-autocomplete-1.1.2.min.js",
"https://storage.googleapis.com/snapengage-eu/js/e9219576-8f74-40b5-8b6f-bbad33f6ca57.js",
"https://www.choopa.com/_js/dragscroll.js",
"bexar.org 3.2.22.pdf",
"https://consent.cookiebot.com/uc.js?cbid=1e27dadb-e278-4c02-aa4f-43f9222c4fbb&culture=en",
"https://bs.serving-sys.com/Serving/ActivityServer.bs?cn=as&ActivityID=1073779012&rnd=922949.8781851793",
"bexarv7df.pdf",
"https://281cecd8ae73dff542e13679e60d5fb9.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html",
"https://www.google-analytics.com/gtm/optimize.js?id=OPT-NVZ8RF3",
"https://tobiasahlin.com/js/portfolio.js",
"Legal court documented agreement to allow and pay target to hire cyber investigators",
"xfe-URL-Data102.com-stix2-2.1-export.json",
"https://app.uizard.io/fonts.css?cache=2022-04-29-12-55-57",
"https://amano.inboundtools.com/tpcontact URL https://armg.inboundtools.com/ URL https://gaiax.inboundtools.com/internship URL https://hmk.inboundtools.com/ URL https://hmk.inboundtools.com/form/assetview_siryo_sier",
"https://s.thebrighttag.com/tag?site=9O7NXzt&H=-5nu6gjg&referrer=https%3A%2F%2Fwww.zealcu.org%2Fhome-loans%2F%3Fmsclkid%3D3ef1349815a11e52b0b256cacc0bc952%26utm_source%3Dbing%26utm_medium%3Dcpc%26utm_campaign%3DSearch%253A%2520Zeal%2520Credit%2520Union%2520-%2520Mortgages%26utm_term%3Dhouse%2520mortgage%26utm_content%3DMortgage%2520General&docReferrer=http%3A%2F%2Finstantfwding.com%2F&mode=v2&cf=7500150%2C7500152&btpdb.9O7NXzt.dGZjLjc1MDAxNTE=UkVRVUVTVFMuMA&btpdb.9O7NXzt.dGZjLjc1MTUyNDU=U0VTU0lPTg&btpdb.9O7N",
"https://tobiasahlin.com",
"xfe-URL-Cnzz.com-stix2-2.1-export.json",
"remote.js.pobrane",
"https://www.googletagmanager.com/gtag/js?id=G-J9PCW0F6JV",
"https://www.hostgator.com/_next/static/css/1746e01e071caaad90f08af905f64c7649b9fd98_CSS.27b3968e.chunk.css",
"https://youtu.be/ZKxvzrxDzt0",
"https://tracking.premiumhealtheurope.com/code.js",
"https://cpanel.net/wp-content/themes/cPbase/assets/js/dist/cpbase.js?ver=5.6",
"TarrantCounty17df.pdf",
"https://pxlgnpgecom-a.akamaihd.net/javascripts/bfp_ssn.js?templateId=11",
"xfe-URL-Cpanel.net-stix2-2.1-export.json",
"xfe-URL-inflect.com-stix2-2.1-export.json",
"xfe-URL-bat.bing.com-stix2-2.1-export 2.json",
"https://bid.g.doubleclick.net/xbbe/pixel?d=KAE",
"https://cop.supply/supreme-bots/\u2022 https://cop.supply/useful-tools/",
"https://www.gstatic.com/recaptcha/releases/1_E1Jb45wiBZrQd45oGZ-2cU/recaptcha__en.js",
"https://colohouse.com/wp-content/cache/autoptimize/css/autoptimize_5e11636f7dd8fb4f55e0ff84f0ed5faa.css",
"tarrant23df.pdf",
"https://js.callrail.com/group/0/66d5efd6cbf06378ea1f/02836fdf-c99c-4a90-b31b-373093db654e/poll.js?t=1649597153888&ids%5B%5D=448598242",
"https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1071979603/?random=1650396033510&cv=9&fst=1650396033510&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0>m=2wg4i1&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.hostgator.com%2F&tiba=Web%20Hosting%20-%202022%27s%20Best%20Website%20Hosting%20%7C%20HostGator&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4",
"https://connect.facebook.net/signals/config/393095817498804?v=2.9.57&r=stable",
"https://www.hushmail.com/shared/javascript/jquery-3.5.1.min.js",
"css",
"TarrantCounty21df.pdf",
"xfe-URL-ascio.com-stix2-2.1-export.json",
"https://embed.tawk.to/_s/v4/app/625d36b405c/js/twk-app.js",
"https://d.adroll.com/pixel/DUKHAKVYIJASHDUBG4V7RE/E23RMKDBEFAEXMXLWK3IWO?adroll_fpc=838a57acc6141112b6107bdce5e3fde6-1650403057055&arrfrr=https%3A%2F%2Fwww.vultr.com%2F&pv=70707106758.07146&cookie=&adroll_s_ref=&keyw=",
"https://vars.hotjar.com/box-4924254a9ce4dc9b959b6e4a9b662d60.html",
"jquery.cookie.js.pobrane",
"https://cdn.livechatinc.com/tracking.js",
"bexar3.pdf",
"magnific.js.pobrane",
"https://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyDR76rjQL_2raonHiZ6ZrPqJr-FPb7pGH0",
"https://www.leaseweb.com/sites/default/files/js/js_6FowaFXT9bT78hf9earPdGcdTmvsFiaBzKgFl9P4fSo.js",
"https://fonts.googleapis.com/css?family=Open+Sans:100,200,300,400,500,600,700%7CMontserrat:100,200,300,400,500,600,700",
"https://cdn.ampproject.org/rtv/012204221712000/amp4ads-host-v0.js",
"bexar api_1.pdf",
"xfe-URL-tobiasahlin.com-stix2-2.1-export.json",
"https://widget.trustpilot.com/trustboxes/5406e65db0d04a09e042d5fc/index.html?templateId=5406e65db0d04a09e042d5fc&businessunitId=4bdc496b000064000505a89d#locale=en-US&styleHeight=28px&styleWidth=100%25&theme=light",
"main.js.pobrane",
"https://www.data102.com/wp-content/plugins/cta/shared//shortcodes/js/spin.min.js",
"bexar api 14.pdf",
"https://prima-abnehmen-shop.com/uk/order-now.html?affiliate=24&source=418&subid2=ddukc&subid3=35908921",
"offcanvas.js.pobrane",
"howtoworkacrickoutofyourneck2.pages.dev",
"https://clear.ml/infrastructure-control-plane",
"https://munchkin.marketo.net/munchkin.js",
"template.26.css",
"https://static.hotjar.com/c/hotjar-1683409.js?sv=7",
"https://cdn.cookielaw.org/scripttemplates/otSDKStub.js",
"https://cpanel.net/wp-includes/css/dist/block-library/style.min.css?ver=5.6",
"http://instantfwding.com/px.js?ch=1",
"https://app-ab02.marketo.com/js/forms2/css/forms2.css",
"https://www.googleadservices.com/pagead/conversion_async.js",
"xfe-URL-dk9ctyhidjrvgn.xyz-stix2-2.1-export.json",
"https://ddailyworkouts.com/tip/fbevents.js.download",
"jquery.min.js.pobrane",
"https://embed.tawk.to/_s/v4/app/625d36b405c/js/twk-chunk-4fe9d5dd.js",
"TarrantCounty1df.pdf",
"https://himado.com/cdn-cgi/challenge-platform/h/g/scripts/invisible.js?ts=1651842000",
"https://connect.facebook.net/signals/plugins/identity.js?v=2.9.57",
"https://www.metronetinc.com/wp-includes/js/hoverIntent.min.js?ver=1.10.1",
"https://connect.facebook.net/signals/plugins/identity.js?v=2.9.60",
"https://www.leaseweb.com/sites/default/files/js/js_kI_QwKJlaBz9CzQdENdUBFiEl4aehfjf4_-9taiwcCE.js",
"webcomponent-polyfill.js",
"https://img03.en25.com/i/elqCfg.min.js",
"stickybar.js.pobrane",
"bexar api 9.pdf",
"https://www.hostgator.com/_next/static/runtime/webpack-83bd83ab777f80a6c75c.js",
"ad_status.js.pobrane",
"overlay.js.pobrane",
"bootstrap.min.js.pobrane",
"https://www.googleadservices.com/pagead/conversion/854235671/?random=1650418372749&cv=9&fst=1650418372749&num=1&value=0&label=PRNxCIWemu8BEJe0qpcD&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0>m=2wg4i1&sendb=1&ig=1&data=ads_data_redaction%3Dfalse&frm=0&url=https%3A%2F%2Fcpanel.net%2F&tiba=Hosting%20Platform%20of%20Choice&gcs=G111&did=dMWZhNz&edid=dMWZhNz&auid=2050955691.1650418373&capi=2&hn=www.googleadservices.com&btty",
"https://js.callrail.com/group/0/66d5efd6cbf06378ea1f/02836fdf-c99c-4a90-b31b-373093db654e/poll.js?t=1649598014683&ids%5B%5D=448598242",
"pagesettings.js.pobrane",
"https://www.googletagmanager.com/gtag/js?id=UA-1837381-13",
"https://a.impactradius-tag.com/foundation-tags-SD382-d393-452e-9c15-ac1e4a6fc6fb1.js",
"https://www.hostgator.com/_next/static/5a0OWA7iirtDqpl2xeXE4/pages/index.js",
"https://insurancerateusa.com/polyfill-036b4a134d8725752ba0.js",
"https://snap.licdn.com/li.lms-analytics/insight.min.js",
"xfe-URL-Js.stripe.net-stix2-2.1-export.json",
"https://s4.cnzz.com/z_stat.php?id=1280305902&web_id=1280305902",
"https://download.clear.ml/cpython_builds/releases/ \u2022 https://download.clear.",
"bexar1.pdf",
"https://www.bugherd.com/sidebarv2.js?apikey=kmu00qbvuigehexs5chefq",
"sw3VTUzeRvWIVwvWSyk6S5gHWPxOOwU1OxerozmN4Hw.js.pobrane",
"https://mc.yandex.ru/metrika/watch.js",
"https://www.data102.com/wp-includes/js/wp-embed.min.js?ver=00b0ffc433836dcf9f57035fded0b908",
"https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1001847692/?random=1650405011980&cv=9&fst=1650405011980&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635471&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0>m=2wg4i1&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.leaseweb.com%2F&tiba=Leaseweb%20%7C%20Global%20Hosted%20Infrastructure%20(IaaS)%20and%20Cloud%20Solutions&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4",
"https://www.choopa.com/_js/bootstrap.js",
"https://www.googletagmanager.com/gtag/js?id=G-3XJ902FY6Q&l=dataLayer&cx=c",
"5.main.bundle.e92e5e24e074f9c2a52b.js",
"jcemediabox.js.pobrane",
"https://js.hs-scripts.com/20704235.js",
"https://player.vimeo.com/video/571271613",
"https://cdn.segment.com/next-integrations/integrations/heap/2.1.2/heap.dynamic.js.gz",
"https://fonts.googleapis.com/css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i&subset=latin%2Clatin-ext",
"https://lptag.liveperson.net/lptag/api/account/22027291/configuration/applications/taglets/.jsonp?v=2.0&df=2&b=2",
"https://colohouse.com/wp-content/themes/Netrouting/js/vendor/modernizr-2.8.3-respond-1.4.2.min.js",
"xfe-URL-Aliyun.com-stix2-2.1-export.json",
"https://bat.bing.com/p/action/140000459.js",
"https://www.gstatic.com/recaptcha/releases/Y-cOIEkAqcfDdup_qnnmkxIC/recaptcha__en.js",
"https://integration.silvercloudinc.com/js/bundle/vendor.js",
"https://insurancerateusa.com/94297995-69529ad7536f090aa776.js",
"https://widget.wickedreports.com/v2/3469/wr-dafa9fae816c2f65d24d1eb593b58626.js",
"https://www.google-analytics.com/analytics.js",
"https://colohouse.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0",
"bexar2.pdf",
"layout.min.js.pobrane",
"jquery.ui.sortable.min.js.pobrane",
"zetalytics .pdf",
"https://static.hotjar.com/c/hotjar-23213.js?sv=7",
"https://my.choopa.com/js/global.js?v=41",
"xfe-URL-Psychz.net-stix2-2.1-export.json",
"https://img03.en25.com/i/livevalidation_standalone.compressed.js",
"https://www.hostgator.com/_next/static/chunks/60aafdb66a57b57b76936ce193fee053374e679c.cdd375bd63e4f4a5a41b.js",
"embed.html",
"https://my.choopa.com/js/desktop.js?v=41",
"https://consent.cookiebot.com/da52fc49-8e48-42b7-9ad3-c219404f6f92/cc.js?renew=false&referer=cpanel.net&dnt=false",
"https://www.clarity.ms/eus2/s/0.6.34/clarity.js",
"https://www.hushmail.com/javascriptinclude/eNpNzEEOQDAQQNEbtVoM7Sks7GXopB0pkQ5xfWJl-5P3JWGh4AvukSRzoKKtqlWlf0Wt4k3rnG2g641Pl6QNOU83zcIn-QMj6ZHpHQ2FF97jiHOmj0ED4FxfwQOf9yPU.en_US.68448bd8190f2f2bae9633f547bbbbbe.0.js",
"https://www.recaptcha.net/recaptcha/api.js?render=explicit",
"https://www.metronetinc.com/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1",
"https://embed.tawk.to/5697c34527b9b5d40b66960f/default",
"https://va.idp.liveperson.net/postmessage/postmessage.min.html?bust=1649597064004&loc=https%3A%2F%2Fwww.zealcu.org",
"https://bat.bing.com/p/action/5797759.js",
"https://sellix.io/cdn-cgi/bm/cv/669835187/api.js",
"xfe-URL-ihagoogle.com-stix2-2.1-export.json",
"https://links.mail.samsara.com/s/c/P9R6gGlExR4nfCwqwJXUmr7NmKcMNde4ZBhCFprlVtsFNgh-4tuTWla0aXN9rIWCjrWtn0Vln7x-hexxVBlY3xxvnEevR8qJU5G5xV3__wo-X7kkpSOhJVfejac-Xk8qu6zs5Z-tILwWYRkNScZNGlAqfwQuJuRw5M-n_ZKI6tuY5XGCZAqWoQepi1NnJiW4wZJkzZlOwGtNkusbuKDcMsLVrrhji2eKh4kYgrJp_SeycJRhasLFCQ3c2bPu4sahEWpcHZrQBaxvdfQgTEno8kV-RJdTDO0zK5MyWDJLeds7mnaDrxlb0O2zmhebUdlHE0R0xHi25dympBUpMlLsQV8bx1WUTOfgK4k0ci9o_2Gbfe22-jLxsJN-msV6pxWYQMaxRNFd4iZRC9J9Z1SC5MBqbvNzqdt98kFdpibnv_QIHdhFyHOR_Ip_LX67Dncc8V8OvAi-H5phfeSyDzwdzf2FQIi82",
"https://googleads.g.doubleclick.net/pagead/viewthroughconversion/728582492/?random=1650418372747&cv=9&fst=1650418372747&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=844&u_w=390&u_ah=844&u_aw=390&u_cd=32&u_his=1&u_tz=-240&u_java=false&u_nplug=0&u_nmime=0>m=2wg4i1&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fcpanel.net%2F&tiba=Hosting%20Platform%20of%20Choice&hn=www.googleadservices.com&us_privacy=1---&async=1&rfmt=3&fmt=4",
"https://www.leaseweb.com/sites/default/files/css/css_7CYF9En6DNp6AojfSKnT8USKR3GvzPwznmTqLTKT9VM.css",
"https://stats.wp.com/e-202216.js",
"https://embed.tawk.to/_s/v4/app/625d36b405c/js/twk-vendor.js",
"bexar api 12.pdf",
"animate.ext.css",
"https://www.metronetinc.com/wp-content/themes/MetroNet/js/jquery.flexslider-min.js?ver=5.8.4",
"https://hybrid-analysis.com/sample/fbba6129666c709aae5bcc8f49cffc28ad0d0c6d5b22fb4ee69da66e5d5fd7d9/634753ff96b237006c46584e",
"bexar10.pdf",
"https://www.hostgator.com/_next/static/5a0OWA7iirtDqpl2xeXE4/_ssgManifest.js",
"https://www.virustotal.com/gui/polyfills/regenerator-runtime.95dc763885f05111a2f88232a2d0cf2d.js",
"https://connect.facebook.net/signals/config/399164440484826?v=2.9.57&r=stable",
"https://himado.com/heihei/layui/layui.all.js",
"bexar api 20.pdf",
"https://www.leaseweb.com/sites/default/files/css/css_47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU.css",
"https://www.data102.com/?wordfence_lh=1&hid=2D6A812A7EB197E80D5A3978A6386BE4&r=0.5029022326538093",
"https://www.googletagmanager.com/gtag/js?id=UA-185991747-1",
"TarrantCounty4df.pdf",
"https://www.googletagmanager.com/gtag/js?id=G-SXR89SKRRS&l=dataLayer&cx=c",
"https://cdn.onesignal.com/sdks/OneSignalSDK.js",
"bexar6.pdf",
"https://eu.snapengage.com/chatjs/servicegetproactivegeodata?w=e9219576-8f74-40b5-8b6f-bbad33f6ca57",
"https://connect.facebook.net/signals/config/828098694004178?v=2.9.57&r=stable",
"Sneaker Bots Proxies Servers Cook Groups Cop Supply",
"TarrantCounty19df.pdf",
"xfe-URL-hostgator.com-stix2-2.1-export.json",
"https://connect.facebook.net/signals/config/3689470801106673?v=2.9.57&r=stable",
"tarrantcountydf.pdf",
"https://embed.tawk.to/_s/v4/app/625d36b405c/js/twk-chunk-32507910.js",
"https://cdn.segment.com/next-integrations/integrations/vendor/commons.54701049fd6fb8497e9e.js.gz",
"magnific.css",
"https://chimpstatic.com/mcjs-connected/js/users/6c3abfa7ff8634c75cdb2b22e/ddf7a436c1746be666f330e4a.js",
"https://www.data102.com/wp-content/plugins/contact-form-7/includes/js/scripts.js",
"https://secure-ds.serving-sys.com/SemiCachedScripts/ebAttribution.js",
"https://lpcdn.lpsnmedia.net/le_re/3.50.0.1-release_5103/jsv2/overlay.js?_v=3.50.0.1-release_5103",
"jquery.ui.core.min.js.pobrane",
"https://fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C700%2C700italic%2C900%2C900italic&subset=greek%2Clatin%2Cvietnamese%2Clatin-ext%2Ccyrillic%2Ccyrillic-ext%2Cgreek-ext&ver=2.9.6",
"https://colohouse.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2",
"xfe-URL-share.vx-underground.org_Conti-stix2-2.1-export.json",
"https://eu.snapengage.com/chatjs/ServiceGetConfig?w=e9219576-8f74-40b5-8b6f-bbad33f6ca57",
"https://d3cxv97fi8q177.cloudfront.net/foundation-A122588-852f-4501-9972-9515a4f53da31.js",
"xfe-URL-Vultr.com-stix2-2.1-export.json",
"\" Page not found